Like practically everybody else in the blogsphere at the moment, I’m suffering quite a bit of comment spam: I had to block my first IP address yesterday – and now I’m blocking the following 7 IP addresses:
209.210.176.19
209.210.176.20
209.210.176.21
209.210.176.22
209.210.176.23
80.50.117.113
64.109.143.166
What sort of spam have I been getting? Well, 80.50.117.113 from “klaus” was a Cheap Viagra, Vicodin, Xanax, Prescription Drugs, and Penis Enlargement Pills spam and 64.109.143.166 from “Alex Dolbayov” was for “Great Site Folks! I have another [?] big t-ts site for you which is really the #1 big t-ts site” (and that’s after I’ve implemented Neil’s change the comment cgi-bin script filename patch type thing) and all the rest were over a variety of posts advertising the same pedo orientated porn site which a number of others have been unfortunately hit with.
Patches I’m going to try include URLs including zipcode are prohibited, Avoid Comment Spam, Comment Spam Quick Fix and I’m certainly going to try Jay Allen’s MT-BlackList once it’s released (I’ve in fact had an email from Kadyellebee of MT-Plugins to let me that it’ll be included in the MT Plugins Manager as soon as it’s released!)
(I may also include the Avoid Duplicate Comments and use some of the advice from Seven quick tips for a spam-free blog) and Comment Queue Script/MT Hack).
Expect a few minor things to change around here once it’s all been implemented (oh, I’ve also installed the Trickle thingy so I can schedule “future blog entries”).
4 Comments
A bit more information:
Spammer 80.50.117.113 found my site on 11/Oct/2003 12:27:19GMT via the url http://www.buka.pl/linki2/index.php?show=urls using the browser “Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)” (probably faked) and landed on entry 118, but they did download a few graphics so it didn’t “look” like a bot – although it only took them 39 seconds from first visit to hitting the “Submit” button.
Spammer 64.109.143.166 came directly to entry 91 at 12/Oct/2003 12:14:32 GMT without any referring information using the “Mozilla/4.0(compatible; MSIE 6.0; Windows NT 5.1)” browser and took just 7 seconds to hit the “Submit” button!
The other comment spammer, however, came straight in via the IP address 209.210.176.33 and started hitting the submit button (with no browser information or referer information ) on 10/Oct/2003 09:08:42 GMT, then again from 209.210.176.21 on 11/Oct/2003 13:04:27 and 13:04:30 and then from 209.210.176.20 at 13:03:59 and 13:05:01 and again and again…
Automated Comment SPAM Solution
I now have a working captcha thanks to James Seng. I really don’t care how much of a pain it is on the accessibility front, the spammers have driven me to finding a working solution. The don’t allow comments from google searches hack also makes first t…
double grr
The porn spam is apparently hitting almost everyone who runs
It looks like Scott, Tim and Dave also got hit by the same spammers – but different IP ranges 🙁
Comments are closed.