FediAdmin, malicious accounts

FediAdmin, malicious accounts

@PaulaToThePeople that's crazy

@PaulaToThePeople @milan fyi?

@PaulaToThePeople

Here are some SQLs to search for anything that might look like an IP address in a users profile ( Displayname, Bio and Extra fields):

SELECT id,username,note FROM accounts WHERE note ~ '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' AND domain IS NULL;

SELECT id,username,display_name FROM accounts WHERE display_name ~ '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' ;

SELECT id,username,fields FROM accounts WHERE (fields #>> '{}') ~ '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}' AND domain IS NULL;

PS: The regex for the IPs is very simple, could be written more exact, but it should give you an idea already.

#MastoAdmin

FediAdmin, malicious accounts

FediAdmin, malicious accounts