Help! spamming from Gmail addresses

[curiositry]

@gibbsdesign Have you looked in the logs? The spammers hitting the send-magic-link endpoint on my site always use a python user agent, which can be blocked using Cloudflare WAF or an Nginx reverse proxy (I have done both).

Ghost subscribe form hit by spam signups, hurting sender reputation

Today my blog started getting hit by a sudden burst of spam email signup attempts: [transactional-smtp-spam-attack] It looks like potentially someone is trying to validate a stolen or bought list, and then the owners of the email addresses that work are marking the confirmation emails (which they did not ask for) as spam. (At least, I can’t think of any other plausible way this would benefit the attacker.) If possible, I would like to avoid hiding behind Cloudflare. I’m self-hosting on Fly.i…

For me, Cloudflare bot fight mode wasn’t effective, and they were coming from multiple IPs in multiple countries so a geoblock wouldn’t have been adaquate either.