⚠️ Do not move your account to mastodon.cloud. If you know someone already on mastodon.cloud you might want to suggest they move to a different server.

-Mastodon.cloud's admin hasn't posted since Feb 2023
-There doesn't seem to be any moderation, really awful bigotry is still there months after being reported
-The server software is very outdated and full of unpatched security holes
-Because of all the above, many other servers have defederated mastodon.cloud

#MastodonCloud #FediBlock

p.s. If you want an easy way to discover reliable good servers, there are human-curated server lists at https://fedi.garden and https://joinmastodon.org/servers

All the servers listed on these sites have to comply with certain standards of technical reliability and moderation.

p.p.s. If you want help with moving there's a guide at https://fedi.tips/transferring-your-mastodon-account-to-another-server

Fedi.Garden – An easy way to join Mastodon and the Fediverse

Highlighting nice servers on Mastodon and the Fediverse

@FediTips

ugh
I just moved there with my non-fiction accounts
This is so tiresome

@screwturn

Oh no, really sorry to hear 😞

Hopefully the human-curated server lists can help reduce this kind of situation happening to people.

@FediTips I'm genuinely surprised that it can still still survive in this zombie state. A lot of Wordpress and similar sites have pretty quickly attracted from the hosting or co-location company's interest after enough reports have been filed against it for objectionable concept or it just being a trojan payload sharing site.

@apz

I wonder if anyone has reported it to the providers higher up the chain? 🤔

There have been reports via Mastodon's own moderation tools but these have AFAIK all been ignored.

@FediTips I don't know, but generally when something web based gets pwned hard enough, sysadmins typically start to raise stink about it. If I spot port scanners or obvious stuff being run against the systems I maintain, I might fire an e-mail to their ISP's abuse address, depending on where they from. With China, Russia etc. I don't bother, US and Europe likely, the Nordics, very likely.
@apz @FediTips lmfao should take a look at catdon.life. It a couple years ago upgraded from v2.5.2 to what version it's currently on v2.7.0.. a release from Jan 2019. Hosts really don't seem to care seems like lol

@apz @FediTips

Just report them to Amazon, does that work?

https://www.whois.com/whois/pawoo.net

Name Servers: ns-115.awsdns-14.com ns-1162.awsdns-17.org ns-1584.awsdns-06.co.uk ns-862.awsdns-43.net

EDIT; oh, and Cloudflare, for mastodon.cloud, actually: https://www.whois.com/whois/mastodon.cloud

Name Servers: cruz.ns.cloudflare.com jake.ns.cloudflare.com
Whois pawoo.net

Whois Lookup for pawoo.net

@plutarch @FediTips Amazon doesn't give a fuck. I reported a huge botnet, got a reply that they could not verify the claim. I went through an internal contact I had to to escalate it. I heard that they basically had laughed at it on their internal chat, with the mentality being that I was some home hosting n00b who got scared when someone scanned them and that I shouldn't expose services unless I wanted them knocked all the time.

Just to bring some context, I set up my first public net connected services when these guys weren't not born yet and only reported it as a courtesy and only because it was relatively big botnet.

@apz @FediTips

Damn.  How are Cloudflare (at looking into/dealing with abuse)?  Asking because I expose my instance via Cloudflare Tunnel.

@apz @plutarch @FediTips
Let them burn! Good of you for trying to give them a courtesy heads up.
@Alison They found themselves on my personal "oops, I don't have the time to report their gaping security issue" list.
@apz @plutarch @FediTips There’s some notable phrase about pride before the fall… ?
@wendinoakland I think it was Confucius himself, whose wise words of "Big IT companies only care if the problem hits their profits" still stay relevant.
@apz I am so going to steal this: “Listen, I wrote my first Fast Fourier Transform in Fortran IV before any of you guys were born, so…” 😂
@FediTips
I check the version of the instance : 4.1.25, released on 2025-04-02 and is unmaintained since this time.

@FediTips the same admin was responsible for mstdn.jp and pawoo.net, both of them also abandoned and running with outdated and unsupported versions.

(It's what I infer from https://mstdn.jp/@Sujiyan/109564291832002068)

Suji Yan (@[email protected])

Recording of Interview of maintainer of Pawoo/Mstdn.jp/Mastodon.cloud :D by @[email protected] @[email protected] and joined by ~12 audiences like @[email protected] etc *83 mins Link: https://mega.nz/folder/DvpnwYBK#2VtqBLiZH9WMICcPdTb0MA

mstdn.jp

@FediTips Hm.. I believe they are part of some other instance, maybe pawoo?

I remember a company being behind .cloud and another big instance

@FediTips Ah yes!

Sujitech, LLC.

@FediTips So yeah, a lot
@stux @FediTips
This might explain why I have a user from Japan and why they didn't join on mstdn.jp
@admin @FediTips On both those servers there is soo much CSAM content.. we suspended/silenced(media) them because it was too much

@stux

Same. And I had no idea they were associated with pawoo. Thanks for mentioning this.

@admin @FediTips

@FediTips Good to know. Thank you!
@FediTips This makes me want to look at my moderation logs... Because I suspect that's a common source...
@FediTips Heads-up to @RaulKrauthausen who is currently still on that server. Would be unfortunate to get disconnected from that voice with wide defederation.
@FediTips with all the security issues, maybe someone could hack into the server and tell all users that they should leave.

@FediTips
I see many legitimate accounts there. I've decided to limit the server, but not block it. This way people can continue following each other, but hear-me.social is protected.

If anyone here does have a follow relationship with anyone on .cloud, please let them know the ship has no captain and it's vulnerable to attacks, and they should jump onto a new one.

If the owner has no interest in having anything to do with the site, why do they keep it going? Why don't they seek a new owner? They should at least let people on their instance know.

@Jerry are you Admin Jerry ??🤔🤔🤔🤔🤔
@codewizard
Yep. This is my personal account for posting things not specifically related to the server.