Friday, November 19, 2004

Blocking a blog spammer


I have been noticing that there have been requests to my blog, with the referrer of "http://12.163.72.13/". One of the interesting things about these requests is that the whole url has been converted to lowercase. (Which means that they were only seeing the main index page, and not the page that they indented.)


After I searched for that referrer url on Google, I found this post. It looks like this is a signature is for a blog spammer. Even though they did not successfully post any spam comments, I decided to blog these requests.





I added the following lines to my configuration:


RewriteCond %{HTTP_REFERER} ^http://12.163.72.13

RewriteRule ^(.*) - [F]


This will return a 403 error whenever a request that has that as a referrer