XMPP Service Operators - 2025-12-18

concerted spam coming from jabb3r.org, it seems

meant to post here but yeah

ended up in the jj server operator muc

Wed 17 Dec 2025 01:21:41 PM - jjj333_p (any pronouns): is the jabb3r.org admin around? check recent registrations

spam so bad it caused gajim to completely topple, had to open dino to set the chat to moderated and even then it couldnt catch up

prosody using the most ram ive ever seen it use lol https://koishi.pain.agency/matrix-proxy/9d5d4397-94e4-4951-b890-90fe653bb74d/image.png

same spammer also with an account on magicbroccoli.de

> concerted spam coming from jabb3r.org, it seems > same spammer also with an account on magicbroccoli.de And xmpp.xyz

Is there any client that is able to bulk delete spam? Going through one by one with conversations ia cumbersome.

modern gajim can moderate all messages from a user

Thanks, will clean up when I am on a computer.

fair warning, said modern gajim seems to completely topple during the spam, i had to open dino to be able to set the chat to moderated and then restart gajim a couple times

Cheogram does it too

I think some module to limit messages could help if I imagine thr kind of spam correctly. Prosody has one at least.

i probably should set that up

doesnt need to be particularly agressive, like 20 messages at once is obviously span though

another wave from easg54@magicbroccoli.de and test044@xmpp.xyz seemingly joining as several different resources

i absolutely need that ratelimit module though, Menel, what is it called so i can look it up

https://modules.prosody.im/mod_muc_limits ?

https://downloadable.pain.agency/file_share/019b304c-c0cd-793f-bdc3-191ed5acb918/04a61931-347f-4c05-ac2a-7f2b48378422.png

this is what im setting, im going to set the room to unmoderated (it fucks with an in dev thing i have) and see what happens

my room also just got hit

all of the accounts are from xmpp.xyz

JIDs are: cboxtown@chatterboxtown.us easg54@magicbroccoli.de lifelover@support@chatterboxtown.us me8272@xmpp.xyz test044@xmpp.xyz

jjj333_p [pain.agency]: yes that

For nom big rooms rate=1 and burst 6 and rest default works good

currently being denial of serviced by xmpp:doingthis@xmpp.earth xmpp:finishhim@xmpp.fi xmpp:snowbunny@xmpp.chat xmpp:no67@yax.im xmpp:massag22@xmpp.co

https://pic.t0.vc/AZKX.png

i cant tell if gajim is so dogwater that blocks are completely ineffective, or if gajim is so dogwater that its still parsing bullshit 10 minutes later

Thu 18 Dec 2025 12:23:54 AM - jjj333_p [pain.agency]: currently being denial of serviced by xmpp:doingthis@xmpp.earth xmpp:finishhim@xmpp.fi xmpp:snowbunny@xmpp.chat xmpp:no67@yax.im xmpp:massag22@xmpp.co Thu 18 Dec 2025 12:24:46 AM - jjj333_p [pain.agency]: https://pic.t0.vc/AZKX.png Thu 18 Dec 2025 12:25:22 AM - jjj333_p [pain.agency]: i cant tell if gajim is so dogwater that blocks are completely ineffective, or if gajim is so dogwater that its still parsing bullshit 10 minutes later

had to switch to dino

oh turns out it did send it just was stuck on sending

thanks gajim

> it was created half an hour ago, then sent a huge number of spam messages to you and to another JID, but most of them got blocked by mod_throttle_unsolicited okay so yaxim was the least spammy because they had a preventative module loaded

maybe we should try to get public service ops to set up that?

My accounts being spammed

https://http.sunglocto.net:5281/file_share/06943e36-4589-7380-a308-31b06913c685/zb2rhcnQiyoPh6cgQzyS1kgtBD7DMrZu4zpQkx1j91P4nJLXh.jpg

xamn

i almost started to get lonely without that guy

> https://http.sunglocto.net:5281/file_share/06943e36-4589-7380-a308-31b06913c685/zb2rhcnQiyoPh6cgQzyS1kgtBD7DMrZu4zpQkx1j91P4nJLXh.jpg yeah that matches what i saw ↺

enable mod_throttle_unsolicited

and set a s2s limit

🎉 they just tried to spam me again and it worked ! xmpp:sipphone@xmpp.xyz

https://pic.t0.vc/HUIF.png lmfao my prosody logs

> enable mod_throttle_unsolicited Installed ↺

just dm spammed by xmpp:monkey76@xmpp.earth xmpp:me8272@xmpp.xyz xmpp:test044@xmpp.xyz xmpp:cboxtown@chatterboxtown.us

Make sure you set an s2s limit per the docs: https://modules.prosody.im/mod_throttle_unsolicited.html (otherwise it will do nothing against this kind of flood)

> Make sure you set an s2s limit per the docs: https://modules.prosody.im/mod_throttle_unsolicited.html (otherwise it will do nothing against this kind of flood) yep this is what i did. the s2s limit seems imprecise (probably some timing bleedover or something) but it worked well. i set it to the recommended 100 which seems to be reasonable enough and doesnt kill gajim ↺

> enable mod_throttle_unsolicited do i enable this on muc ↺

i have it enabled globally

isn't that just for local accounts and outgoing messages?

only a benevolent creator of everything knows

You mean the documentation? :)

Oh for once I wasn't hit by spam \o/

> do i enable this on muc that is local accounts and s2s in ↺

theres a different one for muc

> Thu 18 Dec 2025 12:23:54 AM - jjj333_p [pain.agency]: > currently being denial of serviced by > xmpp:doingthis@xmpp.earth > xmpp:finishhim@xmpp.fi > xmpp:snowbunny@xmpp.chat > xmpp:no67@yax.im > xmpp:massag22@xmpp.co > Thu 18 Dec 2025 12:24:46 AM - jjj333_p [pain.agency]: > https://pic.t0.vc/AZKX.png > Thu 18 Dec 2025 12:25:22 AM - jjj333_p [pain.agency]: > i cant tell if gajim is so dogwater that blocks are completely ineffective, or if gajim is so dogwater that its still parsing bullshit 10 minutes later Gajim takes 3-5 seconds to switch between mucs its probably gajim. Recent updates have only made it worse. Copy and paste doesn't even work anymore since gtk4 and its heavier then chrome ↺