If you want to keep your registrations open, but resist botnets, you may like to block all mailservers resolving to smtp.oneb.net
I desperately seek some workgroup to join, where we would exchange the bogus mailserver lists on daily bases, so we can prevent even registration attempts.
Recently, these domains I am pretty sure were used by the botnet:
file2drive.com
lutech.uk
upphim.net
cloneemail.com
dubokutv.com
cucadas.com
botgetlink.com
tsmtp.org
adn3t.com
kenhphim.net
soc123.net
emaxasp.com
adviseity.com
roratu.com
mucate.com
tinpho.com
datadudi.com
okiae.com
The botnet no longer cares exclusively about Ukraine, pro Russia, but it does lot of random thing. The copied fragments of auto-translated texts include labels of various navigation links, so it is immediate obvious, that the content is machine generated. Also, the IP addresses repeat, so they don't have quite unlimited IP pool.
Most instances solve this problem by limiting registrations, but I am advocating rather for cautious growth of Fediverse, like eg. 10 times of current size. I was told, that "cool things don't need advertising", so I suggest: let's make Fediverse cool. Instead of banning more or less stable, determined and closed social bubbles from interacting, let's rather learn to cooperate and trust each other while hunting botnets like this...
#registrations #fediverse #mastodon #fediban #botnet @kayla_eilhart @smoon
