XMPP Service Operators - 2026-02-07

morph jid: windy@conversations.im

morph jid: whatiftres@jabber.cz

morph jid: kgxhzfudg@conversations.im

morph jid: wrathling@conversations.im

morph jid: foxxly@chatterboxtown.us

I am currently under a spam wave attack

these jids are being created live

any information about them would be appreciated

morph jid: ottemawto@jabber.fr

morph jid: cappitaii@jabber.cz

morph jid: rekks@conversations.im

arretint@conversations.im

morph jid: redliner@conversations.im

morph host utdfudjgx@jabber.cz

Is it really necessary to spam all the JIDs of this morph here? Maybe sou can do a morph MUC for interested people.

It is not necessary, and borders on spam itself.

Wasn't there a blacklist aggregation where you report them to submit@reports.xmppbl.org and interested parties can subscribe to a feed to filter ?

yes

> Wasn't there a blacklist aggregation where you report them to submit@reports.xmppbl.org and interested parties can subscribe to a feed to filter ? unfortunately no client software actually implements this ↺

when it comes to muc spam

The muc host should do, I guess.

should != does

There are several bots that implement it when the server doesn't.

re: morph no way this person is doing all of this manually; I'm starting to think that's some openclaw bs.

No this is a very disturbed person with nothing else to do.

tom: Then approach the server admins, I don't think spamming all operators here with JIDs is a solution.

They predate LLM by some years.

And reporting makes little sense as they switch accounts every 5 minutes or so.

When morph spams they attack a whole bunch of servers at ounce

I've been able to narrow it down to 4 servers they seem to be able to easily make accounts on

it's especially not helpful as to all of us who don't log chats it's temporary. Hence I asked whether there's sort of a _living document_ where everyone can add their JIDs?

``` conversations.im jabber.cz jabber.fr chatterboxtown.us ```

If you are an op, please check those jids

i'd be curious to know what ip they are coming in on and useragents

> it's especially not helpful as to all of us who don't log chats it's temporary. Hence I asked whether there's sort of a _living document_ where everyone can add their JIDs? Those are thowaway accounts they never use again after 5 minutes. ↺

We need more servers to implement the new account reputation XEP and a way to block accounts based on that.

> We need more servers to implement the new account reputation XEP and a way to block accounts based on that. so everyone can block all new accounts and kill XMPP? ↺

How does it kill xmpp when new accounts can only join local mucs for a few days?

>> We need more servers to implement the new account reputation XEP and a way to block accounts based on that. > > so everyone can block all new accounts and kill XMPP? Or block people who do not agree with a group's agenda. ↺

Every server should do what they want. Only let's not fool yourself that it will stop a dedicated human who does things non automated.

> How does it kill xmpp when new accounts can only join local mucs for a few days? because new users can't join and chat like they can on every other platform, so they'll give up and move to IRC or discord etc where they can meanwhile it won't slow down morph at all, he already creates many accounts manually well before using them ↺

>> >> so everyone can block all new accounts and kill XMPP? > > Or block people who do not agree with a group's agenda. honestly im not against it

main reason i like xmpp is provacy, then its security but after that its freedom

if i want i can make my own federation separate from the rest

i think if you want to mass block people based on agenda and stuff i think it should be possible

>> How does it kill xmpp when new accounts can only join local mucs for a few days? > > because new users can't join and chat like they can on every other platform, so they'll give up and move to IRC or discord etc where they can > > meanwhile it won't slow down morph at all, he already creates many accounts manually well before using them So essentially turning XMPP into a pseudo Walled Garden. We can see how certain groups would stand to benefit from that. ↺

> i think if you want to mass block people based on agenda and stuff i think it should be possible It already is, thru private MUCs ↺

>> i think if you want to mass block people based on agenda and stuff i think it should be possible > > It already is, thru private MUCs thats true actually

you could autonate it with bots i think?

>> it's especially not helpful as to all of us who don't log chats it's temporary. Hence I asked whether there's sort of a _living document_ where everyone can add their JIDs? > > Those are thowaway accounts they never use again after 5 minutes. Problem is how easily and quickly morph was-- is able to create accounts on reputable servers like conversations.im. normally conversations is able to protect against that. ↺

how?

> Every server should do what they want. > Only let's not fool yourself that it will stop a dedicated human who does things non automated. If a single person with obsessive mental issues can cause this much damage xmpp-wide we don't stand a chance when there are financial incentives to abuse xmpp professionally unless something changes. ↺

This is just an early warning sign.

What exactly is the damage?

Morph is not stupid.

>> How does it kill xmpp when new accounts can only join local mucs for a few days? > > because new users can't join and chat like they can on every other platform, so they'll give up and move to IRC or discord etc where they can > > meanwhile it won't slow down morph at all, he already creates many accounts manually well before using them Perhaps the plugin should also report on how many stanzas in the last 90d a newly registered user makes ↺

tom: there is only one way to stop people manually doing this stuff : Don't federated with any server that allows anonymous registration.

Thats not true

We need better spam mitigation software

Email is much more restricted and closed off then xmpp but even there it's laughable easy to create a lot of accounts at free providers and spam a single person. If you do it manually... You can't protect it.

And admin tools

Not just xeps with no client implementation

Even if its a standalone tool, thats what privileged entity could be used for.

Doomerism theres nothing we can do isn't helpful. Individual servers will do what they need to, but having tools that make it easy for an admin to raise and lower a security level would help significantly. Sort of like a DEFCON. This is how most adaptive network security products work.

Email has weighted spam detection. Xmpp doesn't have such a system.

Hmm the weighted spam system of email is a good point.

Because it doesn't work with short messages

And email is 99% spam so how is that working out

It works pretty well. I get more spam on my cellular number than email.

> And email is 99% spam so how is that working out Rspamd works really well. ↺

That is easily sorted with disabling all notifications within the dialer and SMS applications.

Email spam systems wouldn't stop someone manually writing and harassing you. They work well on auto spam messages send to millions

>> How does it kill xmpp when new accounts can only join local mucs for a few days? > > because new users can't join and chat like they can on every other platform, so they'll give up and move to IRC or discord etc where they can > > meanwhile it won't slow down morph at all, he already creates many accounts manually well before using them It is perfectly normal to have account cooldown periods. Many apps implement that. And morph will quickly run out of accounts if they have a cool down. ✏ ↺

hard disagree on both points /shrug

the morph obsession😭😭 ✏

this community really is small

dudes ... enjoy morph, use his companion to practice the trolling arts

morph has been obsessed with me lately too lol

didnt know he was an annoyance to everyone else outside the 3 or so mucs i see him in

Just link him the txt file and he'll leave

> Just link him the txt file and he'll leave this one? https://www.moparisthebest.com/morph.en.txt ↺

moparisthebest, btw your yubikey framework expansion is sick!

>> Just link him the txt file and he'll leave > this one? https://www.moparisthebest.com/morph.en.txt That's the one ↺

If you are under attack set your channel to moderated for 24 to 48 hours.

> ``` > conversations.im > jabber.cz > jabber.fr > chatterboxtown.us > > ``` tom, ive blocked all of these except conversations.im, seems to be the only server of the bunch i have legitimate users from ↺

> If you are under attack set your channel to moderated for 24 to 48 hours. this does work, i dont because of an edge case with my bridge setup, but thats a me issue ↺

> this does work, i dont because of an edge case with my bridge setup, but thats a me issue Edge cases are edge cases, for the mass majority of us setting the channel to moderated is an effective way at curbing spam. ↺

I also recommend disabling muc dms except for to mods, however morph doesnt seem to really ever touch dms

> Edge cases are edge cases, for the mass majority of us setting the channel to moderated is an effective way at curbing spam. yes i figured i was implying that ↺

i was agreeing with your message even

Apologies.

> this community really is small theres 4 people on xmpp and 5 of them are trolls ↺

Who or what is morph?

xmpp lore

> xmpp lore Where can I read more about that? ↺

ask the elders

>> this community really is small > theres 4 people on xmpp and 5 of them are trolls yeap .. we like bridges u know ↺

>> xmpp lore > > Where can I read more about that? https://www.moparisthebest.com/morph.en.txt ↺

> Who or what is morph? jak2k, its not up to date, but https://www.moparisthebest.com/morph.en.txt is a good start ↺