I accidentally had my forgejo instance open for registration. When I noticed it, there were tons of fake accounts open, with empty repos opened for each account. All of them had emails associated with them. They might’ve just been trying to annoy me, or maybe there was some plan to be executed later, since they’d have access to basically free storage, without any tracking.
In any case, I have cleaned all of it, and now have a list of 19311 usernames and emails. Maybe I can submit these somewhere for a spam filter? Idk, just curious if there’s any point in keeping this list.
Spamhaus, spamcop
I’ve been reporting spam for years (old iCloud email account I can’t destroy was leaked everywhere back in like 2015) and using the websites to report spam seems to have zero effect.
What does seem to work well is reporting to the originating server’s owner, but it’s mostly hit or miss.
If the email happens have suspicious links, reporting to the IP address owner and the registrar the domain is hosted at is usually very successful. I’ve filed simple reports for those and have received a “we took down this host/domain” within minutes several times.