@Sui @Frondeur @Doll @pwm @ins0mniak @ApocalyptoLatte1488 @CrustyBurgerhead @Goalkeeper @LovecraftEnthusiast @WhiskeyBent @WeissenSocken88 This one is different, yes.

The big difference with the one they were using was that it posted public scope and tagged both the blocker and blocked account. This meant that the followers of the bot, participants in overlapping relays, the public timeline, etc., got outbound requests. That is, if you blocked one of them, there were a large number of entries added to the oban job queue, as well as incoming requests from the Announce activities from the relays. So I took a list of their users, uploaded it in the block importer. Since this version of the frontend doesn't clear it, I didn't even have to select the file again: I could just click "upload" again. So, one click from me resulted in a few hundred requests from this server and each of those resulted in a few hundred requests going out from their server to the rest of fedi. I didn't need to be an admin, I just needed to be a dick, which I am. Then of course instead of fixing their bot, they just deactivated my account. I could have just made another account on literally any server, but instead I posted the file along with instructions for how to use it.