I hate Blog-Spammers
I got home last night after a good meal and sat down to check my email. I logged into my GMail account, and what do I find. *450 new messages* What the $#@!
Apparently, a bot was spamming my website with links to his pornsites at the rate of about 1 a second. I quickly hacked a patch into Blosxom’s writeback plugin (I need to post that somewhere, I’ll do that tonight) to block his comments (no more starting a comment with a URL, sorry). Even after I blocked him tho, I could check the logs and see him POST’ing once or twice a second.
Well, Mr. 4.46.2.104, you’ve been blacklisted. A quick change to my .htaccess file blocked him entirely. Unfortunately, he then escalated to 5-6 times a second, but I’m betting the load was still smaller since it was all 403’s. I’ll give him a few days, then maybe I’ll unblock him… maybe.
So does anyone know any other ways to prevent blog spam? I’m currently using a invalid-wordlist, a single “No comments starting with a URL” filter, and I plan to hack in a “No 2 comments within 30s, from the same IP” filter. Any other ideas?
