Beta
×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

How to stop a spambot attack?

rahlquist (558509) writes | more than 6 years ago

Spam 3

rahlquist writes "Recently one of my sites has been under a slow and steady spambot attack. They were slowly inserting trackback spam so as not to arouse suspicion. When you insert 119,000 trackbacks over a week though, sooner or later, it will be noticed. The situation is under control now, and each IP that tries to submit a trackback now gets blocked through iptables (40 blocked ip's in the last 30 mins), short of contacting each server owner, how can I get this stopped?"

cancel ×

3 comments

Sorry! There are no comments related to the filter you selected.

What about (1)

rigel0111 (1262774) | more than 6 years ago | (#22872100)

Dshield and mynetwatchman? Wont reporting through them help?

WTF is a "trackback SPAM"? (1)

mcrbids (148650) | more than 6 years ago | (#22878684)

Subject says it...

Also, have you confirmed that the SPAM is actually coming from legit servers, or from bots? In other words, are you using greylisting? We use it comprehensively at our company; the difference in SPAM load is so dramatic we were just stunned when greylisting went down (due to a socket error) for a day or so. Where I normally see about 8 legit messages for every SPAM, I was seeing about 1 legit message for every 40 or so SPAM! Ouch!

Yeah, it delays first delivery from a new host for an hour or two, but the difference is just so worth it, and maintenance is virtually non-existent.

Also, a few RBLs are in order, starting with Spam Haus [spamhaus.org] . You are using Spam Haus, aren't you?

Re:WTF is a "trackback SPAM"? (1)

rahlquist (558509) | more than 6 years ago | (#22880286)

I'm talking about whats effectively comment spam on a blog, not email? Email I have covered well.
Check for New Comments
Slashdot Login

Need an Account?

Forgot your password?

Submission Text Formatting Tips

We support a small subset of HTML, namely these tags:

  • b
  • i
  • p
  • br
  • a
  • ol
  • ul
  • li
  • dl
  • dt
  • dd
  • em
  • strong
  • tt
  • blockquote
  • div
  • quote
  • ecode

"ecode" can be used for code snippets, for example:

<ecode>    while(1) { do_something(); } </ecode>