This page will collate posts that share advice and guidance on the spam registration activity connected to “BoomProtocolProbe” and the bulk creation of #bpSpam accounts.

Notes: Over the course of days, the attack has changed approach several times. Each mitigation is quickly overcome. Please do not overly-share specific details as the actor in question may be monitoring the network for mitigations and adapting accordingly. Use your private groups, backchannels, email etc to communicate with your trusted peers. If you wish to share with the community, please use #bpSpam to help others find your content.

An extensive analysis of the activity and it’s related online spam-as-a-service business is available.

Mastodon and forks allow banning the use of certain usernames at /admin/username_blocks – this will stop emails going out as the username cannot be chosen, but it will stop any and all usernames (including valid requests) containing “bp” or “usr_” – this should be considered a temporary measure.

Helpful Posts

https://hear-me.social/@admin/117250060656308016

https://bardicperspiration.club/@Overgoddess/117248747537023800

https://mastodon.pnpde.social/@spielleitung/117242341921660658 offers a database trigger for Mastodon and PeerTube: https://pad.pnpde.social/p/FUloCtoOiNZPX6d18-_r

Fediponics beta testers can use Custom Keyword Groups to auto-suspend these accounts

https://social.main-angler.de/@pfitzer/117253562156042500

https://social.chatty.monster/@losttourist/117258973160468276

https://lsbt.me/@christin/117250736158306055

https://puntarella.party/@admin/117287110832248417

https://javahippie.net/mastodon/security/2026/09/11/mastodon-signup-spam.html demonstrates a database constraint

https://gist.github.com/chofstede/a422427570004719196cde948521dd04 ruby username validator

CrowdSec rules https://git.rollenspiel.monster/ansible-playbooks/proxymanager/src/branch/main/templates/crowdsec/appsec-rules

If you see a resource or advice worth sharing on this page, please message @iftas using the hashtag #bpSpam