Between "Automated protocol deliverability probe" and "Hi! I'm a developer interested in decentralized platforms. I'd love to join to follow tech discussions. Thanks!", I have had to disable registrations on my instance.

The spammers made my SMTP email delivery bill over 15x higher and just blocking the domains isn't an option because they were using providers like gmail.com and icloud.com, and the spammers addresses were receiving that much stuff my failed delivery rates went up.

#MastoAdmin

Any #mastoadmin here who knows how to block a client software?

Like, could I block "Omarchy Mastodon" from using this server? (I know people could change the App name, it's more about the message it sends)

v4.4.26

NoteWhile we continue to support Mastodon 4.4 and release patches for it, please note that Mastodon 4.7 is available with new features, changes and fixes. We encourage administrators to update to the latest 4.7 version when they can. Upgrade...

https://github.com/mastodon/mastodon/releases/tag/v4.4.26

#mastodon #mastoadmin

v4.5.19

Upgrade overview This release contains upgrade notes that deviate from the norm: ℹ️ Requires assets recompilation For more information, view the complete release notes and scroll down to the upgrade instructions section. Changelog Security Update...

https://github.com/mastodon/mastodon/releases/tag/v4.5.19

#mastodon #mastoadmin

v4.6.9

Upgrade overview This release contains upgrade notes that deviate from the norm: ℹ️ Requires assets recompilation For more information, view the complete release notes and scroll down to the upgrade instructions section. Changelog Security Update...

https://github.com/mastodon/mastodon/releases/tag/v4.6.9

#mastodon #mastoadmin

v4.7.3

Upgrade overview This release contains upgrade notes that deviate from the norm: ℹ️ Requires assets recompilation For more information, view the complete release notes and scroll down to the upgrade instructions section. Changelog Security Update...

https://github.com/mastodon/mastodon/releases/tag/v4.7.3

#mastodon #mastoadmin

We just released Mastodon v4.7.3, v4.6.9, v4.5.19 and v4.4.26.

They contain many bugfixes in addition to updating some of our dependencies to fix security issues in those.

We recommend administrators to update when they can.

Full release notes and update instructions are available on the GitHub releases page.

https://github.com/mastodon/mastodon/releases

#mastoadmin

phpc.social is now running on Mastodon 4.7.3, released about 10 minutes ago based on the email I got from GitHub about the release.

#mastoAdmin

Stopping the Mastodon processes before snapshotting it makes a lot of sense here. Skipping the former means that if the update would cause issues, statusses that were fetched by the broken instance means that they are likely lost.

A status can be anything, from a public post to a DM. As a #MastoAdmin you don't want to cause the folks on your instance to be missing out on those - whether that be an innocent cat picure or a loveletter through a DM.

Much like email, if the remote instance tries delivery while the local instance is unavailable, it retries later.

With that in mind, we generally prefer a downtime of ten minutes every blue moon, over a dataloss of the same period.

Ya llegó lo que tanto temía, bots con random users, razones variadas y proveedores de correo legítimos , por ahora son pocos, pero si crece a la velocidad que los otros de bp% , tendré que deshabilitar totalmente los registros, creo que tendríamos que cambiar a invitación persona a persona y un sistema de invitaciones automatizadas con captcha ¿alguna otra idea?

#mastoadmin

Alt...

captura de 3 solicitudes de registro, la primera es el ataque de los bots cuyo username empiezan con 'bp' y como razón de ingreso: "Automated protocol deliverability probe" el segundo y tercero tienen usernames totalmente diferentes, vienen de la misma ip y con correo de gmail, sus razones aunque similares también son diferentes: "Hi! I'm a developer interested in decentralized platforms. I'd love to join to follow tech discussions. Thanks!" "Hi, I'm a developer interested in the fediverse and decentralized social networks. I'd like to join to follow tech and music discussions. Thanks!"

86ed another 80 signup requests from this ‘Automated protocol deliverability probe’ bullshit.

What’s the game here? What are they getting out of this?

#MastoAdmin #FediAdmin

The so-called spokesperson, you learn, doesn't even speak the language, uses that girl as an interpreter, and she is one of the people asking for donations too. It is all in-house, with everyone having a conflict of interest.

This is only one out of many videos I have collected over time.

https://hel1.your-objectstorage.com/catodon/87696553-a7c1-488c-ae70-979a760da13d.mp4

Post 1 of 2

#GazaVerified #Scam #Fraud #Spam #MastoAdmin #FediAdmin

Let's look even closer at that video — setting aside the obvious conflict of interest — and actually dissect what’s going on.

1st, notice how the person is deliberately holding a pair of brand-new crutches while sitting comfortably. The whole point is to project an image of vulnerability, implying they're injured.

2nd, look at the window: it's a solid, fully framed fixture. In fact, it’s the exact type you’d expect to see in a basement — heavy enough that they have to use a stick to prop it open.

3rd, if you think they're in a tent, look again. Not only is there a rigid, framed window, but those moving "walls" aren't a tent at all; they are brand-new bed-sheets with the fold creases still visible. They’ve been tacked up and billowed by a fan to simulate movement. Yet, for a brief moment, a drop-tile ceiling enters the frame.

#GazaVerified #Scam #Spam #Fraud #MastoAdmin #FediAdmin

The scam group known as Gaza Verified continues to do what scam groups do. That includes pressuring people — especially the elderly and disabled — into giving them large sums of money.

Unfortunately, reporting this behavior, even when it seems obvious, may not personally win you any favors, as someone recently learned.

The Fediverse has a scammer problem!

Concerned user:

" Linux have you seen this guy: USER NAME @ mastodon.social?

He seems to be giving a lot to these accounts. I had a look at one of them, and he's given just one of them over £4k in about a month
(eg: https://chuffed.org/project/184394-hanadi-is-a-nurse-graduate-who-need-help-for-her-family).

I hope he's loaded, and he's giving wierd amounts, £9, £8, £50 and then lastly £500! 😕 "

" I already have them on my block list because they were boosting the scam groups post and trying to help them raise money. They're one of their so-called supporters. Although, I haven't yet updated the GIT. The next update will have over 50 or so new accounts. "

" Linux :( he's giving them serious amounts of cash even though they keep guilt-tripping him :(
I did msg him to be careful, but never got a reply.

When I reported https://ieji.de/@hanadinurse88, and told them to stop harrasing the USER NAME guy, some modertor from leji.de reported me, just tagging random posts from me in the report... weird! "

" That whole domain is in my blocked domain list for a reason. There are some sites that are complicit and other sites I suspect are in on it. The Internet and by extension the Fediverse is anonymous, and just became someone is a mod or admin, does not make them a good person. "

" post 2 of 2 (follow-up)

It seems they have removed hanadinurse88, but since they also reported you (to you, not knowing you are the admin of your own site), you see what I am dealing with.

Many scam groups show two sides... a legitimate side and a scammer side. It is how they manage circumstances to their advantage and manipulate moderation systems to evade accountability.

You did the right thing, and it was obvious, so someone couldn't ignore it. But you were also inconvenient to their operation, and so you were reported for voicing yourself.

Alt...

The screenshot is of a private message between myself using my alternative account Linux @ fairy.id and a concerned user. The alt text is already included in the post. The names were removed to protect the innocent (the person being taken advantage of and the person who brought this to my attention).

This morning's list of account requests for our Mastodon instance is even weirder than normal.

AI, wasting more time yet again. Sigh.

#AISlop #MastoAdmin

Alt...

+ Approve X Reject & Suspend ObyxYjoki - - 19 minutes ago 2mail co @0byxYjoki Posts Followers last active 169.76.100.15 ‘Ally Bom/raised on traditional Chumash / Tongva / Kizh land, and now | spend my summers on Haudenosaunee ant Oy d on traditional Chumash h land, and d d d Anishinaabeg land. | feel there's a lot more to allyship than just reciting land acknowledgements, so Im here to learn and hopefully act When depressed, | post nature pictures to cheer myself up. - égalité pour tous - gegen die Faschismus - pazy justicia - he/him code writing tech urbanism nature photogr taf - - 7 hours ago mailztorco @tafi Posts Followers last active 171.25.193.36 [mm] Mruu, | am Ofi the cat. | am cute and very playful. My hair is mostly white, but my tail is black with several brown stripes. And | also have a black spot on my head that look's like a fringe, which gave me the name. A fringe is called Ofina in czech language. bp5alfd32e4f50170d - - 9 hours ago yahoo.cojp oO @bpS5a1fd32e4f50170d Posts Followers lastactive ~~ 176.247.221.67 Automated protocol deliverability probe bp95498d1ab13e53aa - - 9 hours ago gmail com oO @bp95498d1abl3e53aa Posts Followers last active 193.34.73.228 Automated protocol deliverability probe

Vom Bauchgefühl her würde ich keinen der Accounts, die da gerade um Einlass im Burningboard bitten zulassen. Die Quote derer die zugelassen wird ist eh extrem gering. Ich würde sagen einer von 20 oder 30.
Nicht, weil wir sie hier bei uns nicht haben wollen. Sondern, weil es mit extrem hoher Wahrscheinlichkeit Bot-Spam ist. Aber es soll natürlich auch kein User unberechtigt abgelehnt werden. Vielleicht nur deshalb, weil er per VPN reinkommt oder mit einer "merkwürdigen" email.

Vielleicht mache ich mir aber auch einfach zuviel Kopf darum. Aber es nervt im Moment und kostet Kraft.

#fedivers #fediadmin #mastoadmin

@david_bardos I missed this, please ping me next time! Anyway, I dug into this, and it turns out it's a bug in upstream. I fixed it on our server right away and submitted a pull request upstream: https://github.com/mastodon/mastodon/pull/40711

Thanks for spotting it!

#Mastodon #MastoAdmin #MementomoriSocial

This person has been misusing the Fediblock Hashtag to harass both me and my users and seemingly has made multiple accounts in an attempt to get around blocks/limits. But yea got an entire 4 hours of posts to me pretty much with all the same thing

#Mastoadmin

It is amazing how a tiny change in a configuration file can make a server run so much faster. Most of the time, people rely on "sensible defaults" and never unlock the full potential of their servers, leaving a lot of performance on the table.

Things like workers, pools, WAL compression, autovacuum workers, vacuum cost limits, checkpoints, IO timing, ulimit, split processes, service templates, shared buffers, slow query optimizations, etc... I really enjoy fine-tuning these settings.

P.S. Apologies for the brief blip, I just optimized our PostgreSQL configuration further and restarted the services.

#MementomoriSocial #MastoAdmin #SysOps

RE: https://mementomori.social/@ry/117332761939090380

I'm so happy about this. Thank you @ikkeT, it was great working on the servers together over a video call 🫶

So glad we got this done. On to the next endeavours!

#MementoMoriSocial #MastoAdmin

toot.io relay service boosted

Mementomori ry » 🌐 2026-09-25
@ry@mementomori.social

We are live on @upcloud servers!

Tonight, we moved mementomori.social from Hetzner to UpCloud servers in Helsinki. We had scheduled a maintenance window from 17:00 to 20:00, but our instance was down for just under an hour - the last post on the old server went out at 18:30, and the first on the new server went out at 19:30.

Some numbers from the move:
- PostgreSQL upgraded from 14 to 18; database size is 210 GB with about 118.5 million posts, 1.27 million known accounts, and 21.7 million media attachments
- 440041 posts written by our own 990 users
- Search: 34.9 million public posts, 1.24 million accounts, and 4.28 million hashtags indexed
- Data checksums enabled, so silent disk corruption now shows up as an error instead of bad data
- Rebuilt 72 text indexes for the new operating system's collation rules, ensuring ä and ö sort correctly. This also freed up about 20 GB
- Now accessible over IPv6 as well!

Every server is now provisioned with Ansible, and the playbooks are public: https://github.com/mementomori-social/ansibles

If your home timeline looks empty, it will repopulate as you use it. Please let us know if anything seems off.

Huge thanks to @rolle and especially @ikkeT for putting in countless hours. Thank you @upcloud for sponsoring our non-profit Media files remain hosted on Cloudflare R2 as before.

We should now be faster, better, more sustainable, and more sovereign than ever. Party on!

#MementomoriSocial #MementomoriRy #MastoAdmin

We are live on @upcloud servers!

Tonight, we moved mementomori.social from Hetzner to UpCloud servers in Helsinki. We had scheduled a maintenance window from 17:00 to 20:00, but our instance was down for just under an hour - the last post on the old server went out at 18:30, and the first on the new server went out at 19:30.

Some numbers from the move:
- PostgreSQL upgraded from 14 to 18; database size is 210 GB with about 118.5 million posts, 1.27 million known accounts, and 21.7 million media attachments
- 440041 posts written by our own 990 users
- Search: 34.9 million public posts, 1.24 million accounts, and 4.28 million hashtags indexed
- Data checksums enabled, so silent disk corruption now shows up as an error instead of bad data
- Rebuilt 72 text indexes for the new operating system's collation rules, ensuring ä and ö sort correctly. This also freed up about 20 GB
- Now accessible over IPv6 as well!

Every server is now provisioned with Ansible, and the playbooks are public: https://github.com/mementomori-social/ansibles

If your home timeline looks empty, it will repopulate as you use it. Please let us know if anything seems off.

Huge thanks to @rolle and especially @ikkeT for putting in countless hours. Thank you @upcloud for sponsoring our non-profit Media files remain hosted on Cloudflare R2 as before.

We should now be faster, better, more sustainable, and more sovereign than ever. Party on!

#MementomoriSocial #MementomoriRy #MastoAdmin

Huh—found out that a large amount of our infra costs have actually been due to Spaces storage. Time for some pruning! #mastoadmin

Alt...

A graph depicting expenses over time from DigitalOcean. Droplet costs have been large, but Spaces costs (our image assets) have climbed to roughly $90/month, almost as much as our instance itself!

We are aware of an ongoing wave of subscription spam throughout the fediverse.

We are investigating avenues to mitigate this, but they will likely involve deep changes in the sign-up flow that may break sign-up from existing applications.

In the meantime, you can find helpful resources at https://about.iftas.org/2026/09/11/boom-protocol-spam/

#MastoAdmin

Poll for Mastodon administrators *who are not using containers/Docker* : how are you installing Ruby?

If other, please reply to explain how you do it, and why.

For context, we are looking at reducing the number of Ruby versions supported by Mastodon to reduce our maintenance burden (like supporting only Ruby 4.0 in the next version) and want to better understand the impact of such a decision.

#mastoadmin