The media in this post is not displayed to visitors. To view it, please go to the original post.

Over 2,000 accounts now being tracked on the Russian Botnet infecting the fediverse.

35% of them would be silenced or suspended by the IFTAS AUD list.

More info: about.iftas.org/library/suspec…


Suspected Portal Kombat Accounts


The Fediverse is increasingly used by state-sponsored disinformation and propaganda agents. We track accounts believed to be operated by the agencies and/or contractors, and we request account removals via reports, DMs, and email communications with affected service providers.

One particular activity is believed to be the actions of the Portal Kombat network, aka “Pravda network”, which has created thousands of accounts on hundreds of servers.

A public list of accounts being monitored is now available.

If you have received a notice from IFTAS, please reply if you believe we have misidentified any account. Our false positive rate as of Apr 2026 is 14 of 2,140 accounts identified.

If you agree the accounts identified are inauthentic, consider investigating any common identifiers such as shared MX records, and using those to flag, limit, or block account creation.

Example Accounts


Some providers do not remove these accounts when notified (and then may be added to the IFTAS AUD Denylist), therefore the accounts below represent a sample of what these accounts look like, what they post, how they present themselves. This may help admins and moderators in identifying these accounts, and identifying common IP addresses and MX records that can be used to flag or suspend new registrations from this network.

social.roadfm.fr/@akusa
social.roadfm.fr/@anyrum
social.roadfm.fr/@effiebryant
mastodon.lithium03.info/@carol…
mastodon.lithium03.info/@czm2s…
mastodon.lithium03.info/@ynuh
electroverse.tech/@concepcion_…
electroverse.tech/@jocelynsull…
electroverse.tech/@ugiz
todon.ploud.fr/@bryanadavies
todon.ploud.fr/@duwa_ury
todon.ploud.fr/@ezomo
gs.leftic.club/@VioletQuinn
gs.leftic.club/@aji_roti
gs.leftic.club/@Okem_Gecyj



Questa voce è stata modificata (4 ore fa)
in reply to IFTAS

@IFTAS I'm a moderator of the Italian instance mastodon.uno through @informapirata ⁂, and I noticed that one of the Russian bot accounts listed is attributed to the mastodon.uno instance.

The account in question was registered on January 12th and began to be active after more than a week. I personally reported it on January 21st and, as administrator @filippodb ⁂ can confirm, I deactivated it using mastodon's freeze function.
At the same time, all posts published by that account were deleted, but obviously the messages (three in total) reshared by other accounts, messages that contained no problematic content, were not deleted.

The decision to deactivate it rather than suspend it was based on the fact that we were studying the Russian bot phenomenon to understand how often they attacked the deactivated profile, whether they connected automatically or manually, and whether the freeze function helped reduce subscriptions. And indeed, it did.

I would like to add that I personally continue to use this method to combat Russian bot registrations, even on the poliversity.it instance, which I personally manage. Following your report, I have added a silencing action to the freezing process, so that those accounts are not detected by your scraping system Correct: we have learned that the research operations carried out by iftas are all carried out and validated through punctual human control .

On mastodon.uno, however, for purely organizational reasons, we began directly suspending all accounts that still manage to bypass the blocks we've placed on the email addresses used to register.

Returning to the main point, I would like to point out that your report only reached us on April 30th, a full 90 days later, and that account had been rendered practically unusable. Your identification of the account was carried out through automated processing (scraping) Correct: we have learned that the research operations carried out by iftas are all carried out and validated through punctual human control and resulted in a now useless report because it was not linked to any content and to an account that was no longer usable. A report that was therefore completely rightfully not given priority.

The account was then permanently suspended on May 3rd, three days after your report.

Mastodon.uno is the largest Italian instance, with thousands of active users and dozens of registrations per day. Thanks to a staff of around twenty volunteer moderators, we can keep registrations open with virtually immediate processing times and extremely rapid decision-making.

We therefore ask you to remove the name of the bot that was no longer present in our instance from the list of Russian bots, which had been removed from our instance well before your report.

We believe it is not only unfair but also extremely damaging to our reputation that our instance, one of the most active in combating Russian botnets, should be lumped together with other instances that do not practice moderation at all, or that practice poor or incomplete moderation.

We look forward to hearing from you and thank you for your attention.

in reply to Informa Pirata

@informapirata@poliverso.org @filippodb Finally, I'd like to add one of the many posts we've published in recent months (this one from mid-March), in which we inform our users about the specifics of Russian disinformation and the attacks we receive from their botnets. Just to show how sensitive we are to the problem.

mastodon.uno/@informapirata/11…


Sulla propaganda filorussa nel Fediverso

Purtroppo esistono diversi siti e canali telegram direttamente sovvenzionati da Mosca per diffondere opinioni favorevoli alla Federazione Russa e, ancora più spesso, disinformazione.

Noi moderatori di questa istanza stiamo cercando di sensibilizzare il pubblico sulla pericolosità e la scorrettezza di questo modo di fare informazione.

(Segue)

@fediverso


in reply to Informa Pirata

@informapirata@poliverso.org @informapirata@mastodon.uno @filippodb

>Your identification of the account was carried out through automated processing (scraping)

To be clear, I spend roughly two hours per day, every day, manually reviewing accounts, looking at over 150 instances. There is no scraping of any kind. Just me and my mouse.

I have two lists, the new one starting in April. Any accounts not suspended on the old list were brought forward to the new list, generating new reports for older accounts.

Informa Pirata reshared this.

in reply to IFTAS

@informapirata@poliverso.org @informapirata@mastodon.uno @filippodb

I do not see any active account on your service in our data, but if there is something you want me to specifically review, please DM me.

I want to emphasise that mastodon.uno is a stellar example of a well-moderated instance. The dedication of your volunteer staff is evident, and you have my complete respect for the proactive measures you take to keep the Fediverse safe.

reshared this

in reply to IFTAS

@informapirata@poliverso.org @informapirata@mastodon.uno @filippodb

Please understand that being listed does not equate to a failure in moderation; rather, it reflects the reality of being a target for these campaigns. Your transparency regarding the "freeze" strategy is in fact helpful context for those of us tracking these movements and activities.

Informa Pirata reshared this.

in reply to IFTAS

@informapirata@poliverso.org @informapirata@mastodon.uno @filippodb for completeness' sake, I will add that there are two automations:

1. I have a script on cron that queries each active account every six hours to see if it still active, and update the spreadsheet accordingly

2. when it comes to actually filing reports, I have now automated the report creation

These two actions have saved me a couple of hours of labour every day, I was manually filing reports and reviewing active accounts (since October)

reshared this

in reply to IFTAS

@informapirata@poliverso.org @informapirata@mastodon.uno @filippodb

I think it's important to state this very clearly:

Everything published under the IFTAS name is human-reviewed. Every list, every label.

If it says CSAM, I reviewed it. If it says terroristic content I reviewed it. If it says spam I reviewed it.

IFTAS is on it's last legs and it's pretty much just me at this point, other than two small groups that share information with each other.

So please, do not ascribe scraping to IFTAS. It doesn't happen.

reshared this

in reply to IFTAS

Thank you very much for your kind words, and thank you as well for all the important work you are doing.
We truly appreciate the recognition of the effort our volunteer staff puts into moderation and community care.

We have always maintained a zero-tolerance policy toward Russian bots and Kremlin propaganda accounts, and we will continue to take proactive measures to keep the Fediverse safe, healthy, and welcoming for everyone. @informapirata@poliverso.org @informapirata

reshared this

in reply to IFTAS

@IFTAS I've always thought that identifying suspicious accounts was achieved through a mass search, not by ticking off individual instances. This makes your work even more impressive.

Thanks for the clarification, and thank you for your continued success!

@informapirata ⁂ @filippodb ⁂