Tuesday, October 11. 2005
Referrer Spam Solution
The referrer SPAM has just gotten worse and worse. I see thousands of hits on my blog from zombies with references to various {xanax|cialis|viagra|phentenermine}, casino and porn websites.
I finally tooka little time and put in a blocking mechanism which seems to effectively stop them at the door - it's going to be like a SPAM filter, in that I'll need to keep tweaking it, but so far so good. If you need my solution, contact me. (I'm obviously not going to publicly comment on my actual solution).
But here's the somewhat scary part. Many of the refererring domains are subdomains of names that seem completely unrelated. That's not unusual - somehow I doubt that Jackie Zhao really runs a "blackfilmmakermag.com" website. (He doesn't. It's a gambling advertising domain). But at least one of them seems to be a legitimate site - did they sell access to their domain name, or has their DNS been hacked?
Northsky.com, check your servers! Michael, do you really want to be associated with buy-hydrocodone-online.superbikeclub.com ??????
I finally tooka little time and put in a blocking mechanism which seems to effectively stop them at the door - it's going to be like a SPAM filter, in that I'll need to keep tweaking it, but so far so good. If you need my solution, contact me. (I'm obviously not going to publicly comment on my actual solution).
But here's the somewhat scary part. Many of the refererring domains are subdomains of names that seem completely unrelated. That's not unusual - somehow I doubt that Jackie Zhao really runs a "blackfilmmakermag.com" website. (He doesn't. It's a gambling advertising domain). But at least one of them seems to be a legitimate site - did they sell access to their domain name, or has their DNS been hacked?
Registrant:
Mike Di Sabatino
*** deleted ****
Camarillo, CA 93011
United States
Registrar: DOTSTER
Domain Name: SUPERBIKECLUB.COM
Created on: 15-MAR-00
Expires on: 15-MAR-06
Last Updated on: 13-MAR-05
Administrative Contact:
DiSabatino, Michael ******deleted*******
**** deleted ******
Camarillo, CA 93011
US
****deleted****
****deleted****
Domain servers in listed order:
NS1.SJ1.NORTHSKY.COM
NS2.SJ1.NORTHSKY.COM
Northsky.com, check your servers! Michael, do you really want to be associated with buy-hydrocodone-online.superbikeclub.com ??????
Trackbacks
Trackback specific URI for this entry
No Trackbacks
Comments
Display comments as
(Linear | Threaded)
Heh- I was googling for 'Jackie Zhao Spam' and ran across your entry. Might want to take a look at this post:
Comment Spam Blacklist Poisoning about good urls being mixed in to diminish the effectiveness of blacklists. Basically, if I run across a 'good' url that's seemingly spamming my referrer page, I blacklist the IP, not the url.
Comment Spam Blacklist Poisoning about good urls being mixed in to diminish the effectiveness of blacklists. Basically, if I run across a 'good' url that's seemingly spamming my referrer page, I blacklist the IP, not the url.
Thanks. My blacklists use regex patters of text in the URLs. With Serendipity, all the referrer and comment SPAM is blocked for approval so even though its annoying to me, it never appears here.
Nice catch on the attempted joe-job. Something we'll have to keep an eye on in the future.
Nice catch on the attempted joe-job. Something we'll have to keep an eye on in the future.
Why do you blacklist the IP? and does that mean you have to monitor any posting on your site through Serendipity? I am confused by this but my blog forum is getting killed with spam
This is a really old post. Update your serendipity installation to the newest version, and then you'll have TONS of great comment SPAM controls.
I haven't had a problem with comment or referrer spam in a year. They keep hitting me, but it doesn't do anything.
I haven't had a problem with comment or referrer spam in a year. They keep hitting me, but it doesn't do anything.
your are right. s9y blocks spam very well!
greets from germany!
greets from germany!