Blocking Russian Spammers?

[liveevilm]

How do you go about blocking mass comment spammers, content scrapers and such. They seem to be coming from Russia mostly, at least for me. I've been blocking by URL or ip but it's getting tedious. How would you approach this issue? Geo ip block the entire county? Thoughts?

[Venum]

Integrate this to your comment form, for preventing comment spam: google.com/recaptcha/intro/

[CPA-Rush]

cloudflare or browser language via htaccess rules

[liveevilm]

Got comment spam covered with askimet. But I'm getting hits from servers and domain urls (more than just the comment spammers). Not sure exactly what they are doing. Maybe scraping. Browser lang could work...I'm thinking maybe htaccess block on .ru and .it (where most of it is coming from). Any drawbacks to this method?

[Venum]

What CMS do you use in that site? Wordpress?

[javbucks]

depends on CMS you are using, aksimet, captcha .etc or block by the browser language

[mitchum]

I second CloudFlare.

[rxvt]

use cloudflare

[liveevilm]

I'm running wordpress as cms. Dedicated box. So I can tweak anything I need to. I'll take a look at clouldflare. I know there's other advantages with clouldflare like hiding true ips. Just sketchy on running through anything I don't have full control over. (Paranoid? Maybe.)

[WDF]

Apache? mod_security is a good place to start. Cpanel, web-min, virtual-min can use a GUI based CSF/LFD. CSF will also work from command line in linux.

Web Application Firewall = mod_sec

IP based log-in failure detector/firewall = CSF

[Venum]

This is good plugin for Wordpress against bots and crawlers etc. if it is configured correctly:

Wordfence:
- Blocks fake Google crawlers. These are often robots that are either stealing your content or scanning your site for security holes.
- Blocks anyone that accesses your site too quickly. Very fast scanning is a common heuristic that attack bots share.
- Blocks anyone who is generating page not found errors too quickly. If someone scans your site for security holes, they almost always generate a large number of page not found errors in rapid succession.

[thecatwrites]

Cloudfare

[fappingJack]

Cloudflare ��