Example of Sustained Spam Comment Attacks on a single WordPress Posting

Posted on 21:17, October 26th, 2008 by
Strangely
Now I may like to think I’m a literary genius but I am realistic enough to realise I’m not! So what happened was that I got lots of notional referrals sequentially on one post, all trying to comment at the same time! Then after a few minutes the same would happen to another posting – for days!
Take this one, http://strangelyperfect.tv/325/mucca-chucka/ The story of McCartney and his ex-wife is long dead, but suddenly loads of “people” wanted to comment on my particular post.
From 19:44 to 19:54 on one day I had these attempts on /wp-comments-post.php using the address http://strangelyperfect.tv/?p=325, the ugly permalink version.
One other commonality, was that they all came from computers running Windows XP and IE6.0! This is the start of a manual list
- 19:54:14 c-66-176-114-144.hsd1.fl.comcast.net
- 19:54:10 190-78-43-192.dyn.dsl.cantv.net
Then I decided that this dump of 40 hits onto the page processed in Microsoft Access on my PC, is a bit easier to do. ;-) The timestamps show the hits at about 4 seconds apart on average, looking at them.
| timestamp |
ip |
urlrequested |
referrer |
| 1224810158 |
67.168.82.8 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877459 |
78.52.135.239 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877469 |
64.93.242.160 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877479 |
200.90.100.101 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877483 |
74.195.96.97 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877488 |
67.240.194.136 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877495 |
201.234.158.190 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877501 |
24.18.48.87 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877507 |
201.210.84.20 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877511 |
75.64.151.10 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877531 |
87.11.187.128 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877729 |
213.65.154.50 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877733 |
74.197.59.195 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877739 |
64.193.76.17 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877745 |
76.113.136.159 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877767 |
216.254.234.100 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877774 |
80.218.206.15 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877779 |
89.39.196.67 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877783 |
91.184.221.107 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877789 |
24.181.255.167 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877821 |
67.84.15.157 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877826 |
207.255.50.176 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877829 |
68.118.187.171 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877834 |
85.201.103.17 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877840 |
18.111.37.183 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877921 |
220.55.152.45 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877926 |
89.178.98.12 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877931 |
213.114.192.69 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877939 |
98.176.13.130 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877942 |
72.228.20.201 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224877999 |
68.191.158.23 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224878003 |
93.156.138.228 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224878006 |
99.236.181.12 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224878011 |
69.14.134.227 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224878020 |
74.192.226.71 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224878043 |
208.101.109.213 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224878046 |
24.100.17.186 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224878050 |
190.78.43.192 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224878054 |
66.176.114.144 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
| 1224878062 |
62.123.4.141 |
/wp-comments-post.php |
http://strangelyperfect.tv/?p=325 |
Sample WHOIS data:
- 62.123.4.141 Italy ISP
- 66.176.114.144 Comcast NJ ISP
- 190.78.43.192 Venezuela ISP
- 24.100.17.186 New Wave Comms ISP
- 208.101.109.213 Ontario ISP
- 74.192.226.71 Texas ISP
I imagine they are all going to be the same sort of thing…
So somewhere, hiding in these big-brand ISPs are little PCs that all at once, all of a sudden, all wanted to post a comment on a posting that I did months ago!
Yeah right. :-?
In Buddhism there are no co-incidences.
Amazon Related:
Possibly Related Sites
Related Posts by Tags
I’m the only one in this world. Can please someone join me in this life? Or maybe death…
Like or Dislike:
0
0
@addisfant
You should chant Nam Myoho Renge Kyo mate, and realise the potential within yourself and that all life is both temporary and precious. Get back and I’ll show you how!
Like or Dislike:
0
0