registrationspam

currently there is a massive wave of spam registrations everywhere in the fediverse.

For mastodon, I have a solution that works for me:

Create new file /etc/nginx/conf.d/lsbt-registration-spam.conf:

map "$request_method:$uri:$http_user_agent" $block_lsbt_registration_spam {
default 0;
~^POST:/api/v1/accounts:Python/3\.[0-9]+\ aiohttp/ 1;
}

Add to the server block in /etc/nginx/sites-available/mastodon:

location = /api/v1/accounts {
if ($block_lsbt_registration_spam) {
return 403;
}

try_files $uri @proxy;
}