Re: coordinated spam attack on wikicreole.org and jspwiki.org

Jamey Wood <[email protected]> Wed, 26 Sep 2007 13:51:19 -0600
Newsgroups gmane.comp.java.jspwiki.user
Message-ID <[email protected]>
We saw similar edits on wiki.glassfish.java.net, and a few other JSPWiki 
instances we run.

How can we protect against these? It would be nice if we could:

- Block edits from the source IP addrs that these came from
* Will adding SpamFilter patterns for the IPs do this?
(I'm guessing not, but thought I'd check to be sure)

- Do a CAPTCHA challenge during registration and/or page updating

- Validate a user's email address during registration (by sending
it a code that they must subsequently provide back)

Are there existing ways to do any of these with JSPWiki?

Thanks,
Jamey

Janne Jalkanen wrote:
>
> Haven't seen it elsewhere, but it is *really* annoying...
>
> /Janne
>
> On 26 Sep 2007, at 10:51, Chuck Smith wrote:
>
>> Last evening and this morning we suffered from a robot editing dozens
>> of pages on WikiCreole and I just noticed they are hitting jspwiki.org
>> as well. They are each from a different IP and sometimes it would
>> also make multiple edits so that a simple rollback would not be
>> possible. They would simply add a few random characters to the
>> beginning of each page they hit. Have others also experienced a
>> similar attack?
>>
>> Best wishes,
>> Chuck
>> _______________________________________________
>> This is the Jspwiki-users mailing list, in which we discuss the
>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
>> For development discussion, please join jspwiki-dev.
>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>> http://www.jspwiki.org/JSPWikiMailingList
>
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss the stable 
> release (even-numbered, 2.4.x, 2.6.x), and user-issues. For 
> development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList