⚠️ #SW_ISAC_ADVISORY

The #bpSpam attack continues, and if you have implemented a username ban on "bp" you should now also add "usr_"

So far, so good:

nginx.ingress.kubernetes.io/configuration-snippet: |
if ($request ~ "^POST /api/v1/(accounts|emails/confirmations)(\?| )") {
return 403 "No.";
}

#bpspam

We've been getting a flood of spam (see #bpSpam) from a company called "sendflood," which is a "spam for hire" operator. Of course, in the modern internet, the evil people can do whatever they want, whereas the poor bastage hosting one rogue mp3 file is toast.

Anyway, to combat that, I've […]

#bpSpam source analysis and proposed solutions

https://ingo.lantschner.name/post/2026-09-18_mailrelay-mastodon/

I believe #bpSpam is trying to get all remaining instances with open registrations blocked by gmail.com just by generating tons of annoying confirmation requests sent to real gmail.com mailboxes.

Blocking any bp substring without chance for approval is silly, but it is the only mitigation that […]

@joeroe might be helpful: https://about.iftas.org/2026/09/11/boom-protocol-spam/

#bpSpam

@joeroe might be helpful: https://about.iftas.org/2026/09/11/boom-protocol-spam/

#bpSpam

@troy in case it's helpful:

https://about.iftas.org/2026/09/11/boom-protocol-spam/

#bpSpam

Od wczoraj żadnych nowych botów #bpSpam 👍

Bez blokowania bigtechowych serwerów poczty 😉

Możecie dalej korzystać z ukochanego gmail 😜

#FediAdminPL #FediModsPL

Interested in trying to understand #bpspam fake account attack on Mastodon? If you are affected and see some IP addresses registered in Japan trying to create fake bp... accounts, try to traceroute them and reply with network names of first few hops.

But you can try to traceroute ven if […]

so far no new registration #spam since 2 days. With an additional #fail2ban filter and 24h block everything calmed down quite nice.

#mastoadmin #bpSpam

Mastodon and forks allow banning the use of certain usernames at /admin/username_blocks – this will stop emails going out as the username cannot be chosen, but it will stop any and all usernames (including valid requests) containing “bp” – this should be considered a temporary measure.

#bpSpam

The good news: we are now at 20 million accounts created on the network.

The bad news, it's #bpSpam

@pfitzer cc #bpSpam

Hmm, blokowanie #bpSpam po domenach e-mail przestaje działać odkąd wykorzystują icloud.com czy proton.me albo gmail.com

Jak sobie radzicie? Jakieś pomysły poza wyszukiwaniem przez "bp%"?

Są jakieś pomysły na filtrowanie po klasach/adresach ip?

#AskFedi #FediTipsPL #FediPomoc #FediAdminPL

❗️ Spam accounts on #Mastodon #bpSpam

If you want to quickly select all accounts beginning with ‘bp’ in the admin panel (to suspend them), enter the following in the ‘Username’ field:

bp%

It’s also worth selecting ‘Active only’ under ‘Moderation’ in the form above to view newly registered […]

❗ Spam-konta na #Mastodonie #bpSpam

Jeśli chcesz szybko zaznaczyć w adminie wszystkie konta zaczynające się od bp (by je zawiesić), wpisz w "Nazwa użytkownika":

bp%

Warto też w formatce wyżej zaznaczyć w "Moderacja" tylko aktywne, by zobaczyć nowo […]

[Original post on mastodon.com.pl]

➡️ https://about.iftas.org/2026/09/11/boom-protocol-spam/

the page linked above will re-post tips, tricks, guidance to combat the #bpSpam wave impacting many service providers.

#BoomProtocol #BoomProtocolProbe #Spam #FediAdmin #MastoAdmin #PeerTubeAdmin #FediMods #Mastomods

⚠️ #SW_ISAC_ADVISORY

Services continue to report a wave of #bpSpam account creation using the naming pattern "bp" followed by a series of random alphanumerics, eg "bpc7463204e397374e" or "bpde9af0166700f555".

To date almost all accounts are created using […]

[Original post on mastodon.iftas.org]