h3artbl33d :openbsd: :antifa: on Nostr: We are seeing an increased number of account signups on our #Mastodon instance. They ...
We are seeing an increased number of account signups on our #Mastodon instance. They are fake and very likely to be a [part of the Russian LLM-backed campaign](
https://exquisite.social/@exquisite/116420930523009081 ).
The reason for joining tends to be very broad and vague:
> I'm looking to join a friendly Mastodon community and participate in discussions.
The email addresses used in these signups are valid (as they are able to verify it), but seem to be automatically generated.
The IP addresses they use either stem from a VPN, Tor exit node or a compromised webhosting thing *(we do not log IP addresses - except during the registration, which is deleted once an account is approved or denied)*.
One positive consequence: this is really helpful to maintain our blocklist
These bots end up being blocked by our pf(4) across the infrastructure.
#MastoAdmin
Published at
2026-05-28 16:46:02 UTCEvent JSON
{
"id": "1dc406d4e3e1e4adfcbec0dca5169b958c9c51f0858af3a4d279d5122318de04",
"pubkey": "215e73fb33e912bab7bb81306edc5c774fe930d165c608fb1eab9a26158d4330",
"created_at": 1779986762,
"kind": 1,
"tags": [
[
"t",
"mastodon"
],
[
"emoji",
"flan_XD",
"https://media.exquisite.social/exquisite/custom_emojis/images/000/008/793/original/a1e5f2860fe608ea.png"
],
[
"emoji",
"flan_molotov",
"https://media.exquisite.social/exquisite/custom_emojis/images/000/008/815/original/b267812128e25a4d.png"
],
[
"t",
"mastoadmin"
],
[
"proxy",
"https://exquisite.social/@h3artbl33d/116653212486080682",
"web"
],
[
"proxy",
"https://exquisite.social/users/h3artbl33d/statuses/116653212486080682",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://exquisite.social/users/h3artbl33d/statuses/116653212486080682",
"pink.momostr"
],
[
"-"
]
],
"content": "We are seeing an increased number of account signups on our #Mastodon instance. They are fake and very likely to be a [part of the Russian LLM-backed campaign](https://exquisite.social/@exquisite/116420930523009081 ). \n\nThe reason for joining tends to be very broad and vague: \n\n\u003e I'm looking to join a friendly Mastodon community and participate in discussions.\n\nThe email addresses used in these signups are valid (as they are able to verify it), but seem to be automatically generated.\n\nThe IP addresses they use either stem from a VPN, Tor exit node or a compromised webhosting thing *(we do not log IP addresses - except during the registration, which is deleted once an account is approved or denied)*. \n\nOne positive consequence: this is really helpful to maintain our blocklist :flan_XD: :flan_molotov: These bots end up being blocked by our pf(4) across the infrastructure. \n\n#MastoAdmin",
"sig": "61238440d784af19bb1d5dac691144b2f2c9f0814fc450803fa60a3404f06a3dd106ad5b2e10f883e2007b60c3484ec23551297f8f1ab91eb99be1e82b9ee7d5"
}
