November 10, 2003

Ddos'ed by comment spammer

Now I have experienced being taken off the net by a comment spammer. Some lame ass trying to advertise his prono-site attacked my server with comments. Handeling MySQL inserts, page rebuilds etc. just got to much when MT was told to do it several times a second. Luckely I discovered it in time to shut down the webserver, block the offending IP, and then restart.

Now I am curious to see if the ISP of the offender will take action against him/her/it.


Comments

Get MT Blacklist [1]. It has done a good job keeping my site clean (feel free to kickstart your blocking by downloading my blacklist [2], carefully compiled based on spam received from global and scandinavian spammers)

[1] http://www.jayallen.org/projects/mt-blacklist

[2] http://www.jacobsen.no/anders/blog/blacklist.txt

Posted by: Anders - kl: 18:42, 10 November, 2003 - #1399

Glad to see you're still alive, Jarle :)

Posted by: Remco - kl: 13:19, 12 November, 2003 - #1404

Hi Remco, always glad to be alive! Now I have MT Blacklist up and going, lets hope it will work! :-)

Posted by: Jarle - kl: 11:39, 13 November, 2003 - #1405

"prono site"? :-)

Posted by: trond - kl: 00:48, 13 December, 2003 - #1439

Any luck with their ISP banning them/booting them/punishing them in any way?

I've had my fair share of strange spamattacks, but find that most ISP are really not interested in doing much about it (this goes double if the offender is in Korea on kornet.net).

ha det gott!

Posted by: dabitch - kl: 14:13, 15 January, 2004 - #1549

According to them they delt with it. I haven't seen anything from the same ip-range since, so I am guessing the account was closed down.

Posted by: Jarle - kl: 22:45, 18 January, 2004 - #1563