This post will collate posts that share advice and guidance on the spam registration activity connected to “BoomProtocolProbe” and the bulk creation of accounts.

Notes: Over the course of days, the attack has changed approach several times. Each mitigation is quickly overcome. Please do not overly-share specific details as the actor in question may be monitoring the network for mitigations and adapting accordingly. Use your private groups, backchannels, email etc to communicate with your trusted peers. If you wish to share with the community, please use #bpSpam to help others find your content.

Admin Jerry

[email protected]

@iftas
I set up a rule in Mastodon to require approval for any name with "bp" and after rejecting dozens manually, I finally set up a Cloudflare edge rule. So far it has blocked 59 attempts to open accounts here after running for about 8 hours today (10-Sep)

What is wrong with this person?

The rule I set, which I hope is only temporary, is to block if this is true:

(http.user_agent contains "aiohttp" and http.request.uri.path contains "/oauth")

2026-09-11, 02:32 1 boosts 1 favorites

The Overgoddess

[email protected]

If u are seeing a wave of spammy regs today and u want a quick fix, we have one that is working. We are not sharing publicly to avoid the spammer seeing and changing the junk, but is okie to msg if u need help.

Takes like… 2 minutes.

#fediblock #FediAdmin #fediMod

2026-09-10, 20:58 4 boosts 3 favorites

https://mastodon.pnpde.social/@spielleitung/117242341921660658 offers a database trigger for Mastodon and PeerTube: https://pad.pnpde.social/p/FUloCtoOiNZPX6d18-_r

Fediponics beta testers can use Custom Keyword Groups to auto-suspend these accounts

If you see a resource or advice worth sharing on this page, please message @iftas