__/ [Roy Schestowitz] on Wednesday 12 October 2005 17:45 \__
> For the past week or two there has been a gradual increase in the amount
> of referrer spam, hitting heavy pages specifically. I have re-directed all
> such requests to 403.shtml, but I currently get nearly 10,000 page
> requests that are spam every day. I checked the logs for IP addresses, but
> I can't filter by IP blocks. It's too diverse. Have you got any tricks up
> your sleeves? I know some tools that combat this, but they need console
> access if not root access too.
> In the mean time I can keep bandwidth at reasonable levels, but what if
> the spam levels continue to rise?
The pace of this zombie attack continues to increase tonight. They must be
capturing and infecting more machines world-wide. I still add re-directions
to avoid huge loads. The attackers go to the heaviest pages on purpose.
Please help! I contacted my hosts last night (intending to install Bad
Behaviour or SpamValve - need root access), but they must be asleep at the