During the last weekend around 100 comments were posted to this blog entry. It’s not that my blog has suddenly become superpopular. All comments consisted of links to online casino promotion pages and such, and it took me a long time to delete them all. When I was done, I realised that more similar comments had already been posted. This is how the spammer’s HTTP requests looked like in the apache logs:
85.17.3.200 - - [24/Sep/2007:07:56:38 -0700] “POST
/blog/2007/09/02/lautoescola-del-racc-canvia-una-molt-
bona-aplicacio-web-per-un-software-amb-llicencia-altament-
restrictiva/trackback/ HTTP/1.1″ 200 412 “-” “-”
I solved the issue by blocking this particular IP address, which was the same for all the posts, with an apache .htaccess configuration file:
order allow,deny
deny from 85.17.3.200
allow from all
From now on, his requests will be failing with a 403 Forbidden error:
85.17.3.200 - - [25/Sep/2007:06:02:23 -0700] “POST
/blog/2007/09/02/lautoescola-del-racc-canvia-una-molt-
bona-aplicacio-web-per-un-software-amb-llicencia-altament-
restrictiva/trackback/ HTTP/1.1″ 403 710 “-” “-”
Good riddance! Since I added this filter, the boot has keept retrying every 20 minutes, though. Perseverance is a virtue, but this IP address filter is not going away :) I hope the bot does not come back from a new address. If it does I’ll add CAPTCHA based protection to this site.
3 Comments
Please, do try Akismet[1], it’ll block lots of comment spams without using these unmantainable IP blocks ;P
Captcha-based commenting is a nuisance for the visitor, I do not recommend it at all :-S
[1] http://akismet.com/
Yes u should try akismet ! it works really good !
Akismet is now installed :)
Thanks for the feedback!
One Trackback/Pingback
[...] days ago in this blog entry I explained that a spammer was filling another entry with spam comments. It was the [...]
Post a Comment