Gambling spam bots on forgejo

7cc5c4f330d47060 commented

2026-03-28 12:15:02 -04:00

There are several bots on forgejo, mostly using mailmenot.io emails (except for one i've seen), creating various spam repositories related to a specific gambling site. This site will not be named here, there appear to be several urls.

They seem to use AI-generated biographies to seem like legitimate users.
They link to a random site, sometimes through Google to a notepad site, sometimes directly to the scam site.
Some accounts from that domain don't create repositories.

Forgejo has an option EMAIL_DOMAIN_BLOCKLIST to block domains, but I am unsure if the bots will just use another domain. I would also send a PR to block it but, due to your setup to publish this, it would likely be difficult to add back to the configuration.

There are several bots on forgejo, mostly using mailmenot.io emails (except for one i've seen), creating various spam repositories related to a specific gambling site. This site will not be named here, there appear to be several urls. - They seem to use AI-generated biographies to seem like legitimate users. - They link to a random site, sometimes through Google to a notepad site, sometimes directly to the scam site. - Some accounts from that domain don't create repositories. Forgejo has an option `EMAIL_DOMAIN_BLOCKLIST` to block domains, but I am unsure if the bots will just use another domain. I would also send a PR to block it but, due to your setup to publish this, it would likely be difficult to add back to the configuration.

chipmunkmc commented

2026-03-28 15:12:09 -04:00

Owner

I tried adding a blocklist entry, we'll see what happens.

7cc5c4f330d47060 commented

2026-03-31 04:59:53 -04:00

Author

There seems to be more now, mostly for sites in southeast Asia. Is there some kind of captcha to block them?

Rows
Columns

Gambling spam bots on forgejo #9