uh oh i think i figured out where the spam is coming from: wss://relay.mostr.pub the Fediverse/Mastodon bridge. it appears that this bridge functions as a general purpose relay - not only a bridge - and the spam bots have discovered it. i can't have it enabled on Damus' global timeline if it's going to continue doing that. the bridge should probably not be accepting anything that isn't at least interacting with Fediverse users.