‍fuchsiaaaaaaaaaaaaaaaaa @f0x@pixie.town

If so, you can send an abuse report to abuse@aussiebroadband.com.au, regarding ips `159.196.229.70` and `2a01:4f8:162:6027::2`. One of my servers shows scraping access logs going back to at least December 2022

can other server admins grep their logs for `159.196.229.70`, they seem to be doing mass scraping of public timelines, toots and blocklists.
from an Australian residential ip?

#MastoAdmin

#FediBlock bbad.com (instance at fediverse.bbad.com)

federates/interacts with all the usual scum

Quite interesting workaround; the kiwifarms scraper is configured to not follow HTTP redirects, so by adding one you can make them give up, while legit users can still view the page without issues.

https://git.pixie.town/f0x/nixos/src/branch/main/nodes/aura/services/nginx.nix#L202-L215
Adapts my nginx setup to redirect /about/more to /about/much-more

Of course a scraper could go to much-more directly now, but if we all pick something unique, that's impossible to hardcode for. And if they *do* start following redirects, we could introduce honeypot instances that redirect all around the place, disrupting the scrape (which all happens in sequence across domains btw)

So this has been an ongoing issue, would love it if people found the earlier threads about it for more context cause I don't have the spoons right now

Originally written by "mint", hosted on the kiwifarms git is a tool that continuously scrapes publicized instance blocklists to allow searching who has you blocked (resulting in emails like uwu we did nothing wrong how dare you block our instance)

Through correlation, turns out the main IP being used by fba.ryona.agency is `54.37.233.246`. Blocking that at the firewall level prevents them from getting any new data.

Other instances exist too though, being hosted on
`23.24.204.110`, `45.86.70.49`, `88.65.6.124`, `187.190.192.31`

the drow.be / bka.li / teleyal.blog / mooneyed.de "kromonos" user has their own version, that feeds an API that gives your instance a highscore for blocking their shit, scrapes from `185.244.192.119`, with user agents presenting as random instances

These, and other scrapish ip's are also listed in https://git.pixie.town/f0x/nixos/src/branch/main/nodes/aura/configuration.nix#L103

#FediBlock #MastoAdmin

#MastoAdmin tip because at least on our version the Domain summary will *count* the number of following relations, but with has no way to list who is following who.

Postgres queries:

"Their followers here":
```
SELECT user_follows.username, user_follows.domain, user_following.username as follows, user_following.domain as follows_domain FROM follows INNER JOIN accounts AS user_follows ON user_follows.id=follows.account_id INNER JOIN accounts AS user_following ON user_following.id=follows.target_account_id WHERE user_following.domain='gts-dev.pixie.town';
```

"Our followers there":
```
SELECT user_follows.username, user_follows.domain, user_following.username as follows, user_following.domain as follows_domain FROM follows INNER JOIN accounts AS user_follows ON user_follows.id=follows.account_id INNER JOIN accounts AS user_following ON user_following.id=follows.target_account_id WHERE user_follows.domain='gts-dev.pixie.town';
```

#FediBlock librosphere.fr

- Racist replyguying
- federates with all the usual garbage instances
- instance about page links to the kiwifarms blocklist scraper tool to show how sad they are to get blocked by other instances
- offers soapbox frontend