{"id":190,"date":"2008-11-06T14:03:06","date_gmt":"2008-11-06T19:03:06","guid":{"rendered":"http:\/\/blog.timeoff.org\/rick\/?p=190"},"modified":"2008-11-10T18:51:03","modified_gmt":"2008-11-10T23:51:03","slug":"fighting-the-good-fight","status":"publish","type":"post","link":"https:\/\/blog.timeoff.org\/rick\/2008\/11\/06\/fighting-the-good-fight\/","title":{"rendered":"Fighting The Good Fight"},"content":{"rendered":"<p>\u00c2\u00a0<\/p>\n<p>The amount of spam I&#8217;ve been receiving on this blog had been skyrocketing lately. It reached the point that it was pretty much an everyday chore to clear it out. So, like many before me I decided to activate the Akismet (version 2.2.1) plug-in.<\/p>\n<p>All was well for a few days. But then, out of nowhere, Akismet began calling my attention to an unbelievable amount of trackback spam. By &#8216;unbelievable&#8217;\u00c2\u00a0I mean several a minute, sometimes. Hundreds and hundreds overnight.<\/p>\n<p>Now, that shouldn&#8217;t be a problem because they&#8217;ll go away on their own after a period of time. But what about legitimate stuff? There could be some of that, and it&#8217;s important to flag it so Akismet &#8216;learns&#8217;. \u00c2\u00a0Um, that&#8217;s what they say, anyway. The trouble, of course, is that the longer the list of stuff to look over becomes, the harder it is to identify the good stuff.<\/p>\n<p>This morning I logged on to see 17 l-o-n-g pages of it. Something would have to be done!<\/p>\n<p>Here&#8217;s what a typical entry on the Akismet Caught Spam page looks like.<\/p>\n<p><a href=\"https:\/\/blog.timeoff.org\/rick\/wp-content\/uploads\/2008\/11\/typical-trackback-spam.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-191\" style=\"border: 1px solid black;\" title=\"typical-trackback-spam\" src=\"https:\/\/blog.timeoff.org\/rick\/wp-content\/uploads\/2008\/11\/typical-trackback-spam-300x82.jpg\" alt=\"\" width=\"300\" height=\"82\" srcset=\"https:\/\/blog.timeoff.org\/rick\/wp-content\/uploads\/2008\/11\/typical-trackback-spam-300x82.jpg 300w, https:\/\/blog.timeoff.org\/rick\/wp-content\/uploads\/2008\/11\/typical-trackback-spam.jpg 497w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>All instances share the IP address of 82.233.30.32 which is linked to a whois search. If I point my browser at the IP directly I see a typical Apache test page &#8211; <span style=\"text-decoration: line-through;\">the server<\/span> the offending server is <em>powered by CentOS<\/em>. A reverse-DNS doesn&#8217;t give any more insight &#8211; no other host names. Google doesn&#8217;t have it cached, either. The IP is probably spoofed&#8230;<\/p>\n<p>The text of the spam changes a bit, as does the host name. When I point my browser at the host name, though, there&#8217;s some kind of content for just the briefest instant, but then it quickly changes to a typical <em>blog has been removed<\/em>\u00c2\u00a0page. In fact, every one I&#8217;ve looked at is exactly like this.<\/p>\n<p><a href=\"https:\/\/blog.timeoff.org\/rick\/wp-content\/uploads\/2008\/11\/not-found.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-192\" style=\"border: 1px solid black;\" title=\"not-found\" src=\"https:\/\/blog.timeoff.org\/rick\/wp-content\/uploads\/2008\/11\/not-found-300x120.jpg\" alt=\"\" width=\"300\" height=\"120\" srcset=\"https:\/\/blog.timeoff.org\/rick\/wp-content\/uploads\/2008\/11\/not-found-300x120.jpg 300w, https:\/\/blog.timeoff.org\/rick\/wp-content\/uploads\/2008\/11\/not-found.jpg 747w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>Whaddya know, onlinecasino21.blogspot.com doesn&#8217;t resolve to the IP address I mentioned earlier, either. What a surprise, right?<\/p>\n<p>Anyway, it would be nice if Akismet allowed you to filter the spam and apply a <em>delete all<\/em> to the result. But it doesn&#8217;t, so we&#8217;ll have to take more drastic measures.<\/p>\n<p>Turning off trackbacks and pingbacks (same setting) would probably work but I&#8217;d rather not do that. Blacklisting the address in WordPress doesn&#8217;t work, Akismet still gets it first. Here&#8217;s what I did. In my .htaccess file I added these sections.<\/p>\n<p><a href=\"https:\/\/blog.timeoff.org\/rick\/wp-content\/uploads\/2008\/11\/code.jpg\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-193\" style=\"border: 1px solid black;\" title=\"code\" src=\"https:\/\/blog.timeoff.org\/rick\/wp-content\/uploads\/2008\/11\/code-300x99.jpg\" alt=\"\" width=\"300\" height=\"99\" srcset=\"https:\/\/blog.timeoff.org\/rick\/wp-content\/uploads\/2008\/11\/code-300x99.jpg 300w, https:\/\/blog.timeoff.org\/rick\/wp-content\/uploads\/2008\/11\/code.jpg 412w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>And that seems to have applied the brakes. I haven&#8217;t seen another instance of this spam for several hours.<br \/>\n<a href=\"https:\/\/blog.timeoff.org\/rick\/wp-content\/uploads\/2008\/11\/code.jpg\"><\/a><\/p>\n<p>Another thing that just might be worth mentioning. I run several blogs and when I was activating Akismet to mine I activated it on the others as well. But this &#8211; my personal blog &#8211; is the <em>only<\/em> one that&#8217;s been troubled by this onslaught of trackback spam. I don&#8217;t know who I pissed off out there, but somebody &#8211; or something &#8211; has latched on and it ain&#8217;t letting go.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u00c2\u00a0 The amount of spam I&#8217;ve been receiving on this blog had been skyrocketing lately. It reached the point that it was pretty much an everyday chore to clear it out. So, like many before me I decided to activate the Akismet (version 2.2.1) plug-in. All was well for a few days. But then, out &hellip; <a href=\"https:\/\/blog.timeoff.org\/rick\/2008\/11\/06\/fighting-the-good-fight\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Fighting The Good Fight<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[54,8,62],"_links":{"self":[{"href":"https:\/\/blog.timeoff.org\/rick\/wp-json\/wp\/v2\/posts\/190"}],"collection":[{"href":"https:\/\/blog.timeoff.org\/rick\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.timeoff.org\/rick\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.timeoff.org\/rick\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.timeoff.org\/rick\/wp-json\/wp\/v2\/comments?post=190"}],"version-history":[{"count":0,"href":"https:\/\/blog.timeoff.org\/rick\/wp-json\/wp\/v2\/posts\/190\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.timeoff.org\/rick\/wp-json\/wp\/v2\/media?parent=190"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.timeoff.org\/rick\/wp-json\/wp\/v2\/categories?post=190"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.timeoff.org\/rick\/wp-json\/wp\/v2\/tags?post=190"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}