Example of Sustained Spam Comment Attacks on a single WordPress Posting

datePosted on 21:17, October 26th, 2008 by Strangely

Now I may like to think I’m a literary genius but I am realistic enough to realise I’m not! So what happened was that I got lots of notional referrals sequentially on one post, all trying to comment at the same time! Then after a few minutes the same would happen to another posting – for days!

Take this one, http://strangelyperfect.tv/325/mucca-chucka/ The story of McCartney and his ex-wife is long dead, but suddenly loads of “people” wanted to comment on my particular post.

From 19:44 to 19:54 on one day I had these attempts on /wp-comments-post.php using the address http://strangelyperfect.tv/?p=325, the ugly permalink version.

One other commonality, was that they all came from computers running Windows XP and IE6.0! This is the start of a manual list

  • 19:54:14 c-66-176-114-144.hsd1.fl.comcast.net
  • 19:54:10 190-78-43-192.dyn.dsl.cantv.net

Then I decided that this dump of 40 hits onto the page processed in Microsoft Access on my PC, is a bit easier to do.   ;-) The timestamps show the hits at about 4 seconds apart on average, looking at them.

timestamp ip urlrequested referrer
1224810158 67.168.82.8 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877459 78.52.135.239 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877469 64.93.242.160 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877479 200.90.100.101 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877483 74.195.96.97 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877488 67.240.194.136 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877495 201.234.158.190 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877501 24.18.48.87 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877507 201.210.84.20 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877511 75.64.151.10 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877531 87.11.187.128 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877729 213.65.154.50 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877733 74.197.59.195 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877739 64.193.76.17 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877745 76.113.136.159 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877767 216.254.234.100 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877774 80.218.206.15 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877779 89.39.196.67 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877783 91.184.221.107 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877789 24.181.255.167 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877821 67.84.15.157 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877826 207.255.50.176 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877829 68.118.187.171 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877834 85.201.103.17 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877840 18.111.37.183 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877921 220.55.152.45 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877926 89.178.98.12 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877931 213.114.192.69 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877939 98.176.13.130 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877942 72.228.20.201 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224877999 68.191.158.23 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224878003 93.156.138.228 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224878006 99.236.181.12 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224878011 69.14.134.227 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224878020 74.192.226.71 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224878043 208.101.109.213 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224878046 24.100.17.186 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224878050 190.78.43.192 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224878054 66.176.114.144 /wp-comments-post.php http://strangelyperfect.tv/?p=325
1224878062 62.123.4.141 /wp-comments-post.php http://strangelyperfect.tv/?p=325

Sample WHOIS data:

  • 62.123.4.141  Italy ISP
  • 66.176.114.144  Comcast NJ ISP
  • 190.78.43.192  Venezuela ISP
  • 24.100.17.186  New Wave Comms ISP
  • 208.101.109.213  Ontario ISP
  • 74.192.226.71  Texas ISP

I imagine they are all going to be the same sort of thing…

So somewhere, hiding in these big-brand ISPs are little PCs that all at once, all of a sudden, all wanted to post a comment on a posting that I did months ago!

Yeah right. :-?

In Buddhism there are no co-incidences.

Amazon Related:

Possibly Related Sites
Related Posts by Tags
categoryPosted in Website | printPrint

2 Responses to “Example of Sustained Spam Comment Attacks on a single WordPress Posting”

  1. addisfant on April 24th, 2009 at 5:02 am

    I’m the only one in this world. Can please someone join me in this life? Or maybe death…

    Like or Dislike: Thumb up 0 Thumb down 0

    • Strangely on April 24th, 2009 at 8:54 am

      @addisfant

      You should chant Nam Myoho Renge Kyo mate, and realise the potential within yourself and that all life is both temporary and precious. Get back and I’ll show you how!

      Like or Dislike: Thumb up 0 Thumb down 0

Leave a Reply

Name: (required)
Email: (required) (will not be published)
Website:
Comment:

Comments links could be nofollow free.

Spam Protection by WP-SpamFree

Improve the web with Nofollow Reciprocity.

Recent Posts

Archives

Topics

© 2007-2010 Strangely Perfect All Rights Reserved

Easy AdSense by Unreal

Strangely Perfect is Digg proof thanks to caching by WP Super Cache