imagine being named after the first sound you make
@KRISHNA @louisoft01 What the fuck, is this an actual spam bot on fedi

cc @p
@zeta @KRISHNA @louisoft01 @wowaname @waifu

Fixed via iptables, will look around and scrub. (Sorry for the delay, it's 4:00 a.m. here.)

Incidentally, the bot's claim of being @folk is a lie. I think I know who's doing it. I don't know who is dumb enough to try to false-flag @folk, he already pisses people off all the time anyway. It's his goddamn *brand* to shit on your ideology. (It's part of his charm.)
@louisoft01 Yes, it's banned, deleted, the two IPs¹ it was using are '-j DROP'd.


¹ 103.231.91.74 and 103.231.91.34, for the benefit of any other admins that might want to check their logs, although I believe this was targeted and the user won't be moving on to other servers.
@nerthos @moonman @dirb

Depends about which thing:

> I should slep now

No, never sleep. Sleep is the cousin of death.

> also, the "my other account is" is classic

Yes. Classic.

> It's already obvious who is behind @KRISHNA, so FUCK YOU VR...

Cannot confirm nor deny at this time.

> masoton.social the gmail of the fediverse

No, mastodon.social is the AOL of the fediverse.

> writing anything on Notepad should be a crime tho

No, Arthur Whitney is a genius. Per http://archive.vector.org.uk/art10501320 "When I saw it in 2007 it was running Windows XP and had five windows open: two MS-DOS and three Notepad. Brutally simple IDE. Doubtless things have improved since."

> beep boop

This was definitely a total lie.
@p The question was directed at moon actually as he can compare the ips you gave to his own server logs to see if dirb's theory was correct or not
@nerthos ...Okay, well, mine was funnier.

(Though I would be interested in the actual answer when moonman's around again.)
@p @nerthos I don't normally keep logs, but right now I am logging web access because of abuse (it was announced). I found the second IP, all it has done is looked at some avatar images, about 8 requests. I don't have referer header information unfortunately. There's no smoking gun here. GeoIP suggests the source of the IP addresses are Australia or New Zealand by the way, but the person could be using a proxy.
@matrix My approach is to log everything but you have an aggressive logrotate setup so nothing more than a few days old is retained. So you can deal with stuff, but you still don't have much to hand over in case anyone comes knocking on the datacenter.

It's not really perfect, but it works all right, I think.
Follow

@p Oh, nginx logging is on by default.

· · Web · 0 · 0 · 1
Sign in to participate in the conversation
Game Liberty Mastodon

Mainly gaming/nerd instance for people who value free speech. Everyone is welcome.