Blocking unwanted guests with NGINX

Lately, my sites are being hammered by “unwanted behavior”. Because I feel I cannot blindly trust my WordPress installs to be 100% bug-free, I like to block as many of these unwanted behaviors before any PHP code is executed on my server. Currently, I use the following NGINX techniques to…

Referrer spam (200912-01)

Recently I’ve been noticing a referrer spammer targeting my sites from the IP address 94.102.63.60. Trying to promote aimtrust and theinvestblog. Since there doesnt seem to be any abuse-related email address in the whois info for that address, and the @nl.iqarus.com address doesn’t…

Stopping referrer spam (Part 2)

Let’s add a little more data to my previous article on stopping referrer spam. It’s the current list of blocked IP addresses. Currently the list blocks 245 addresses. RewriteEngine On RewriteCond %{REMOTE_ADDR} ^217.106.90.[0-255] [OR] RewriteCond %{REMOTE_ADDR} ^12.177.13.252$ [OR] RewriteCond %{REMOTE_…

Stopping referrer spam (or die trying)

Referrer spam, to some webmasters something unknown, to others a severe pain in the butt. People visiting your website while faking a refferer aren’t that bad, but people actually using webspiders to massively desecrate your website statistics are very annoying, these people need to be targeted. Since some people…

Adding SPF records in Plesk

As of Plesk 7.1.4, Plesk allows us to add TXT records in the DNS for a domain, thus allowing us to add SPF records. SPF is, in theory, a good way to stop spam. In short, SPF allows you to tell the world, which mailservers are allowed to…

SPF: Sender Policy Framework

It seems some spammers have been using the init1.nl domain to forge from-addresses in their spams. First of all, my server is not being used for this, they are all using open relays/proxies, this is out of my hands. I have however chosen to add an SPF TXT…