I have an apache server that was misconfigured and left as an open proxy for a week. A bunch of requests for forwarding pay-per-click advertising started streaming in and using our server.
This behaviour has been rectified and the server is no longer an open proxy.
The requests are still coming in by the truckload, and now they're being served with a 404 response.
The spammers code probably isn't checking the return codes so I'm not sure what the best approach is to get this traffic to go away.
In your experience is a best to send 404's / 500's? No response? Shut the server down for a few days? Is there a service to report the originating IPs to?
Am I now stuck with these requests until the spammers computers gets confiscated by the NSA, and therefore best to change the port or ask our ISP to give us a new IP address?
After 23 days of serving 404's the traffic has finally calmed down from about 10 queries/second to about 1 query every 15 seconds.