Forgot your password?
typodupeerror
Spam

+ - How to stop a spambot attack? 3

Submitted by
rahlquist
rahlquist writes "Recently one of my sites has been under a slow and steady spambot attack. They were slowly inserting trackback spam so as not to arouse suspicion. When you insert 119,000 trackbacks over a week though, sooner or later, it will be noticed. The situation is under control now, and each IP that tries to submit a trackback now gets blocked through iptables (40 blocked ip's in the last 30 mins), short of contacting each server owner, how can I get this stopped?"
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

How to stop a spambot attack?

Comments Filter:
  • Dshield and mynetwatchman? Wont reporting through them help?
  • Subject says it...

    Also, have you confirmed that the SPAM is actually coming from legit servers, or from bots? In other words, are you using greylisting? We use it comprehensively at our company; the difference in SPAM load is so dramatic we were just stunned when greylisting went down (due to a socket error) for a day or so. Where I normally see about 8 legit messages for every SPAM, I was seeing about 1 legit message for every 40 or so SPAM! Ouch!

    Yeah, it delays first delivery from a new host for an hour o
    • by rahlquist (558509)
      I'm talking about whats effectively comment spam on a blog, not email? Email I have covered well.

Aren't you glad you're not getting all the government you pay for now?

Working...