gordon.dewis.ca - Random musings from Gordon

Subscribe

Comment spammers

December 19, 2011 @ 12:36 By: gordon Category: Meta, Seen on the 'net

I happened to notice these entries in the logs while looking for something else:

208.85.175.27 - - [16/Dec/2011:07:04:13 +0000] "POST /wp-comments-post.php HTTP/1.0" 500 2367
81.17.23.117 - - [16/Dec/2011:07:04:14 +0000] "POST /wp-comments-post.php HTTP/1.1" 500 2367
194.8.26.147 - - [16/Dec/2011:07:04:15 +0000] "POST /wp-comments-post.php HTTP/1.1" 500 2367
93.187.17.200 - - [16/Dec/2011:07:04:16 +0000] "POST /wp-comments-post.php HTTP/1.1" 500 2367
213.186.122.27 - - [16/Dec/2011:07:04:17 +0000] "POST /wp-comments-post.php HTTP/1.1" 500 2367

It’s highly unlikely that five people would all be making a comment at one second intervals, so I can only assume that it’s some sort of spam network.

And sure enough, these IP addresses appear at regular intervals making similar attempts, all of which fail.

Remember: All spammers must die.

4 Responses to “Comment spammers”


  1. Akismet has been having a field day over at The Squid Zone ( http://www.squidzone.ca ) hehe.

    Seriously… comment spamming has been brutal lately. I get mostly spams for what I can only conjecture are counterfeit UGG shoes/boots.

    • gordon says:

      Yeah… Akismet has been getting a workout here, too. They’re getting into the spam queue which means they’re getting past the captchas. Can’t tell if it’s being OCR’d or some sucker is having to type them every time.

      • Chinese slave labour and people on scammy “work at home” jobs they got from the internet.

        So yeah, someone types the captcha.

        • gordon says:

          Makes me wish I could set my CAPTCHA to have some sort of escalating complexity factor based on the number of comment submissions in a short period of time.



Leave a Reply to Evolving Squid