I just wanted to let all #FediAdmin's know about a very bad practice you could be targeted by.
As an activist server we've had to deal with DDoS atacks and all kinds of threats, but today I could finally resolve an issue that exists since March 2022.
Since then climatejustice.social is/was marked as malicious on different websites that scan for threats and that led to many users not being able to reach the site because their internet provider or firewall blocked us.
I've contacted many such sites in the past but only got useless AI replies or - in the best case - we got removed from the blocklists as false positives.
Today I finally found out what got us on the blocklists in the first place. Someone created an account in March 2022, simply wrote the IP address that is associated with some malware in the profile description and then reported us to different sites.
So we should probably find a tool that automatically searches for IP addresses in profile descriptions and report them.
And while we're at it, it could also find inactive accounts with urls in their profile, as most of them are probably spam.