Warning for Mastodon instance admins
Over the past few days, I’ve been noticing a wave of coordinated bot registrations. These accounts typically have AI-generated avatars, English names, and sign up using suspicious domains (.click, .work, tmail.mx, etc.) and similar IP ranges.
Behavior: they boost random posts to appear legitimate, but have 0 followers and no real activity.
Recommendation: enable manual approval for new registrations if you haven’t already.