The GreyMatter Comment Spam Attack

I've talked before about a comment spam attack on GM. I seem to have immunised myself against the "off the shelf" attack, but that doesn't stop the 'bots from trying. I've been seeing a lot of it this month, but from about 8.33am today until now, I've had 216 attempts, all from different IP addresses on different blog entries. I suppose it's only a matter of time until they figure out how to be more successful. Hopefully by then, Tiki will have better anti-spam features too.

Submitted by coofercat on Thu, 2005-04-21 11:59


tar pits

i've just plopped a tar pit on my site...i was getting POST's to a specific URL always in the same format and always from IP's that whois has never heard of!

i've dabbled with apache re-write rules before, me no scared...

not only do i now close posts for comment after a while but anyone POSTing to a particular URL with a particular format to this message will now get a response from my server... it'll just take about an hour and they'll get random garbage under a 403 header :)


interestingly, within 24 hours of putting it live, i've had several people vanish into the tar pit and they seem to be trying to work out what's going on... traffic to some very strange URL's (all 404's i might add) have suddenly appeared ;)

Submitted by Anonymous (not verified) on Sun, 2005-04-24 21:00.