1 cuddles May 30, 2006 05:08
3 cuddles May 30, 2006 13:17
just woke up and logged in. 138 more since i posted last night. all coming from xs4all.be
its trackback spam, btw... heres a copy...
----------
Trackback from: 230819 Blog Verification (http://www.230819.ro/) [Visitor] ยท Edit
230819 Blog Verification
230819
Permalink 05/30/06 @ 01:24
----------
New trackback on your post #532 "Nobody Girl - by Dionedes"
http://www.flowerseatshit.com/index.php?p=532&tb=1
Website: 230819 Blog Verification (IP: 82.146.99.201 , 082-146-099-201.dyn.adsl.xs4all.be)
Url: (http://www.230819.ro/) <- edit by whoo to break spammy link
Excerpt:
<strong>230819 Blog Verification</strong><br />230819
4 village_idiot May 30, 2006 13:36
Heya Cuddles,
Sorry for your troubles, but please dont re-post spammy urls on the forum so that they end up as links :( That just gives em more of what they want.
thx!
5 cuddles May 30, 2006 13:40
sorry whoo. havent had my meds yet, so the brain no worky.
anyway, the url is dead every time... "host not found" and all that.
6 edb May 30, 2006 19:36
I wonder if the antispam central system works on trackbacks? I'm pretty sure it does, so you should be banning/reporting/deleting them even though it seems like it'll take forever. How about the IP block? Did you block it and are you still getting TB spam from it? I don't know that much about how trackbacks work so it's possible an IP block won't block trackbacks. Anyone know about that?
Personally I turned off trackbacks on all my blogs, which ends up meaning I'm not motivated to fight that particular battle.
The only hack I know of that works against trackback spammers is [url=http://forums.b2evolution.net/viewtopic.php?t=3764]item 2 in this thread[/url]. Unfortunately it'll only work against the spammers who assume htsrv is named htsrv. Smarter spammers check your page, so you would want to change the name every now and again. Notice what item 1 is?
---------------
Here's a thought for anyone out there who knows how to do this stuff:
$doubleCheckReferers = 0; // Set to 1 to enable double checking
I wonder if there is a way to make trackbacks take advantage of this bit even if it's set to 0? I think it would make the blogger's server work harder when it blocks stuff, but might it also block real trackbacks in the trackback is sent before the post is posted? Just a thought...
7 cuddles May 31, 2006 01:53
Blocked by IP, and while it's let up some, it's not stopped entirely, which leads me to believe they're spoofing the addy.
I'll try the other fixes tonight.
Comment or referer or trackback spam? Either way, if you've got a consistent IP address and feel confident blocking it won't block real traffic and do not have any personal objection to blocking IP addresses (or ranges) then by all means block the IP!!! Also report the hell out of the fake domain, especially if it's a varying subdomain on a reasonably stable domain name. We might not publish it, but we might if it seems like something that will protect the user base from spam.