[ Wordpress ]

WP 트랙백 스팸 공격

Abe Olandres Editor-in-chief April 9, 2008 · 2 min read

Listen to article

Visa brings Apple Pay to its customers in the Philippines Apple Pay launches in the Philippines Google axes AI Studio app before official launch Samsung's HDR10+ ADVANCED debuts on Prime Video Canon EOS R6 V with RF 20-50mm f/4L IS USM PZ Review | A video content powerhouse!

인기가 많을수록 공격도 더 많이 받는다고 합니다. 이는 지금 WordPress에게도 똑같이 적용됩니다. WordPress 블로그의 대규모 코드 주입 및 숨겨진 링크가 상당한 주목을 받고 있으며, 오늘 밤에는 또 다른 형태의 공격인 WP 트래크백 스팸 폭격을 발견했습니다.

공격은 단순하지만 효과적입니다 -- wp-trackback.php 에 HTTP 요청을 폭주시키는 것입니다. 실제로 DDoS 와 유사합니다. 이를 수행하는 몇 가지 방법이 있을 수 있습니다:

소프트웨어 기반입니다. 특정 사이트나 웹페이지에 대해 1,000개의 HTTP 동시 요청을 수행할 수 있는 소프트웨어를 본 적이 있습니다.
코드 삽입. 타겟 페이지 (이 경우 wp-trackback.php) 를 인기 페이지나 사이트에 추가하여 페이지 로딩 시마다 해당 페이지를 요청하게 합니다. 이를 많은 다른 고트래픽 사이트에서 복제하면, 순식간에 슬래시닷 효과가 발생합니다.
봇. GoogleBot이나 Yahoo! Metacrawler와 유사하지만, 이러한 유형의 봇은 악의적인 의도를 가지고 특정 페이지인 wp-trackback.php만 노립니다.

사실 매우 어렵습니다. 블로그가 공격받은 우리 서버 중 하나를 약 6 시간 동안 모니터링했습니다. 이 공격은 디그 효과나 슬래시닷 효과처럼 보였습니다. 그러나 어떤 디그 방지 솔루션도 작동하지 않았습니다. WP-SuperCache조차 막아내지 못했죠. 그러다 문득 깨달았습니다. 아마 페이지가 캐싱되지 않았을지도 모른다고요.

분석을 확인한 결과 다음과 같은 결과가 나왔습니다:

wordpress trackback

WP-Shortstats 가 이를 추적했습니다. 블로그의 거의 모든 페이지에서 수천 건의 트랙백 요청이 몇 시간 만에 발생했습니다.

더욱 악화시킨 것은 wp-shortstats 플러그인도 이를 기록하고 있다는 점입니다. 즉, 각 페이지 요청마다 Shortstats에 의해 실행되는 해당 SQL 쿼리가 상황을 더욱 악화시키고 있습니다.

결과 -- 느리고 더디게 움직이는 블로그; 결국 과부하가 걸리거나 서버가 다운됨.

해결책은 트래백을 비활성화하는 것이 아닙니다. wp-trackback.php 파일을 삭제하거나 CHMOD 권한을 000 으로 변경해야 합니다. 만약 발신자의 IP 를 식별할 수 있다면 해당 IP 도 차단하세요.

블로그는 이제 합법적인 트랙백을 보내거나 받을 수 없지만, 현재로서는 이것이 유일한 해결책입니다.

What is a WP Trackback Spam attack?

It floods wp-trackback.php with HTTP requests, similar to a DDOS attack.

Why did WP-SuperCache fail to stop the attack?

The trackback page was not being cached, so caching solutions could not fend it off.

How did the wp-shortstats plugin worsen the attack?

It recorded each trackback request, adding extra server load for every page request.

React to this article:

attack flood hack pingback spam trackback

Abe Olandres

Editor-in-chief

Abe is the founder and Editor-in-Chief of YugaTech with over 20 years of experience in the technology industry. He is one of the pioneers of blogging in the country and is considered by many as the Father of Tech Blogging in the Philippines.

8,012 Articles

View all posts by Abe Olandres →

29 Comments

crochet marker · 12 years ago

Hi there, I would like to subscribe for this weblog to take
most up-to-date updates, therefore where can i do it please assist.

moving and storage · 12 years ago

Bekins Moving Company is prepared to offer a host of moving
services for any need that you might have. The services provided by a
Moving Company – A moving company helps companies and folks to relocate
their items from a single spot to an additional whether in the identical town or a
single town to one more. Get help from your pals who’ve
by now hired the movers.

call of mini dino · 12 years ago

It is truly a great and useful piece of info.
I’m happy that you shared this useful info with us. Please keep us informed like this.
Thank you for sharing.

Anonymous · 12 years ago

Thanks for your marvelous posting! I seriously enjoyed reading it, you happen to be a great author.
I will make sure to bookmark your blog and definitely will
come back at some point. I want to encourage you to definitely continue your great writing,
have a nice morning!

furniture · 12 years ago

Clean and Sand – When the perfect day arrives, you will need to remove any hardware
you do not want painted and clean your laminate furniture off with TSP and a rag.

Sauder wood panels are laminated to give the product a strong, wooden appearance.
It definitely helps us to remain in close
contact with nature while enjoying the scenic splendor.

https://independent. · 12 years ago

I adore you for gathering useful info, this post has given me
a lot more info!

Gretta · 12 years ago

Un gros remerciement au créateur du site internet

how to get a flat · 12 years ago

Hi there everyone, it’s my first visit at this site, and piece
of writing is actually fruitful for me, keep up posting these posts.

free software · 13 years ago

Awesome issues here. I’m very happy to peer your article.
Thanks a lot and I’m taking a look forward to contact you.
Will you kindly drop me a mail?

top gadget · 13 years ago

Woah your blog is wonderful i enjoy mastering your articles. Remain up the fantastic works of art! You understand, many people are browsing rounded because of this data, you might help them enormously.

how to get a · 13 years ago

Having read this I thought it was really informative. I
appreciate you spending some time and energy to put this
information together. I once again find myself personally
spending a lot of time both reading and leaving comments. But so
what, it was still worthwhile!

www.ask.com · 13 years ago

Hi! What’s the name of that blog template? Or it’s custom?

Energy Jewelry – Innovative or Nonsense · 13 years ago

Howdy, Tidy submit. It has an matter using your website around ie, could check this? IE even now is definitely the current market main as well as a massive section of other folks will probably pass up ones exceptional composing for that reason challenge.

New Y8 Car · 13 years ago

My brother suggested I may like this blog. He used to be entirely right.
This publish actually made my day. You can not believe simply how
a lot time I had spent for this information! Thanks!

best vibrators · 13 years ago

Great items from you, man. I’ve understand your stuff prior to and you’re just extremely wonderful.
I actually like what you have bought here, certainly like what you are saying and the best way
in which you say it. You are making it entertaining and you continue to take care of to stay it sensible.
I can’t wait to learn much more from you. This is actually a terrific web site.

SEO · 13 years ago

Everything becomes less clear when you enter grey hat territory.
an enquiry engine may be a database of internet sites.
But it is extremely important that anyone looking to hire an SEO professional be aware of the differences.

bluehost xmpp-server · 13 years ago

That is a very good tip particularly to those fresh to the blogosphere.
Simple but very accurate information… Thanks for sharing this one.
A must read article!

Justin · 14 years ago

As we all know, looks can be deceiving, so I decided
to try out the question tool for myself. ”. You can then take a hard look at the companies that come up for that particular keyword.
Naturally, they will flock to your competitor who does.

Thus, in minimum cost, you get an opportunity to increase your site ranking on Search Engine Result Page (SERP).
The major preference is for offshore SEO companies as they offer SEO at the most competitive
prices. Pages and articles are very different, as far as Joomla is concerned.
Lastly, make sure that you have a reliable work-at-home office.
Configure You – Tube settings by changing the default settings to your preferred and secure preferences.

What are the advantages of article submission. organic
search, frequency of blog posts, frequency of on-page optimization, the relative importance of links,
the use of social media, the best way to measure results, etc.

If your website deals with certain products or services, then
conduct a proper research on these and then form your SEO content.
‘ Every page should be optimized with additional keywords. No – you name some of your images “breast. In this article, I will show you the best Word – Press SEO plugins you need to use in order to boost your search engine rankings and get more traffic to your blog. A well-formed internal linking structure and good sitemap can ensure all pages of a website being indexed by a search engine. 4) Managing your online business. When a person enters a keyword into the search box of a particular search engine such as Google, there will be scores of results showing out which are a result of a search engine algorithm devised by that particular search engine. A good web solutions company will always provide you realistic time frame for the results to show up. November 2012.

Bernhard · 17 years ago

After using WP-reCAPTCHA I’ve minized the numbers of SPAM. Still remaining trackbacks – sometimes hundreds per day.

Deleting those trackbacks could be simple. But you have to differentiate: there are trackbacks coming form websides you would like to discuss with, there are trackbacks from pharmacy and sex you begin to hate.

I would like to know a tool you add the IP address and a trackback of this IP will no longer be shown.

netsearchworld.com · 17 years ago

And who does not wish to pay for a hosting, is urgent here – the best free web hosting!

maxmud · 17 years ago

aSvUJA i just whant to say
http://trustedsitelist.com/search.php?q=v-seo-deneg-net

mike · 18 years ago

Xeto6s hi! how you doin?

olga · 18 years ago

Good 235rter2rwer23r

Showbiz Intriga? Get It From Boy! · 18 years ago

OMG! i believe this is culprit, that’s why last month my host server to crash several times and my blog too..

CHMOD to 000?is it just like deleting the wp.trackback thing??

SELaplana · 18 years ago

i don’t know if my selaplana.com experience this. i tried to investigate but i don’t know yet how to know if the blog has been attacked by this kind.

ash · 18 years ago

oh!.. still great it’s fixed… thanks.

Abe Olandres Editor-in-chief · 18 years ago

@ash, that’s the only way I was able to detect the attack. caused the server to slow down and crash at times. Looks like your blog is on that server too.