Spam bot (I think) from multiple IP addresses

[nadreg]

Hi,

Thanks for the thread, and I had read it before. My question was more to the behaviour that these bots seem to be exhibiting. The patterns I am seeing are:

1. The countries the attacks seem to be coming from are: Thailand, Turkey, South Korea, Poland, Vietnam. There are more, but these are the top 5.
2. Previously, the bots were hitting the registration page, but now are just parked on the homepage. I suspect a scraping going on, but haven't seen any content show up on other sites yet.
3. The traffic to the homepage really picked up 4/1 onwards.

What I've done so far is:
1. Install bot-trap, which has been somewhat effective. but it doesn't trap these bots, since they don't seem to be crawling the site.
2. Ban ips as I identify through iptables.

Unfortunately, neither of these seem to be too effective with this attack.

Has anyone seen a similar pattern, and if so, how did you deal with it?

Thanks!