Example of Sustained Spam Comment Attacks on a single WordPress Posting

Now I may like to think I’m a literary genius but I am realistic enough to realise I’m not! So what happened was that I got lots of notional referrals sequentially on one post, all trying to comment at the same time! Then after a few minutes the same would happen to another posting – for days!

Take this one, https://strangelyperfect.tv/325/mucca-chucka/ The story of McCartney and his ex-wife is long dead, but suddenly loads of “people” wanted to comment on my particular post.

From 19:44 to 19:54 on one day I had these attempts on /wp-comments-post.php using the address https://strangelyperfect.tv/325/mucca-chucka/, the ugly permalink version.

One other commonality, was that they all came from computers running Windows XP and IE6.0! This is the start of a manual list

  • 19:54:14 c-66-176-114-144.hsd1.fl.comcast.net
  • 19:54:10 190-78-43-192.dyn.dsl.cantv.net

Then I decided that this dump of 40 hits onto the page processed in Microsoft Access on my PC, is a bit easier to do.   😉 The timestamps show the hits at about 4 seconds apart on average, looking at them.

timestamp ip urlrequested referrer
1224810158 67.168.82.8 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877459 78.52.135.239 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877469 64.93.242.160 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877479 200.90.100.101 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877483 74.195.96.97 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877488 67.240.194.136 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877495 201.234.158.190 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877501 24.18.48.87 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877507 201.210.84.20 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877511 75.64.151.10 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877531 87.11.187.128 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877729 213.65.154.50 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877733 74.197.59.195 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877739 64.193.76.17 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877745 76.113.136.159 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877767 216.254.234.100 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877774 80.218.206.15 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877779 89.39.196.67 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877783 91.184.221.107 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877789 24.181.255.167 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877821 67.84.15.157 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877826 207.255.50.176 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877829 68.118.187.171 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877834 85.201.103.17 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877840 18.111.37.183 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877921 220.55.152.45 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877926 89.178.98.12 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877931 213.114.192.69 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877939 98.176.13.130 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877942 72.228.20.201 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224877999 68.191.158.23 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224878003 93.156.138.228 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224878006 99.236.181.12 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224878011 69.14.134.227 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224878020 74.192.226.71 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224878043 208.101.109.213 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224878046 24.100.17.186 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224878050 190.78.43.192 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224878054 66.176.114.144 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/
1224878062 62.123.4.141 /wp-comments-post.php https://strangelyperfect.tv/325/mucca-chucka/

Sample WHOIS data:

  • 62.123.4.141  Italy ISP
  • 66.176.114.144  Comcast NJ ISP
  • 190.78.43.192  Venezuela ISP
  • 24.100.17.186  New Wave Comms ISP
  • 208.101.109.213  Ontario ISP
  • 74.192.226.71  Texas ISP

I imagine they are all going to be the same sort of thing…

So somewhere, hiding in these big-brand ISPs are little PCs that all at once, all of a sudden, all wanted to post a comment on a posting that I did months ago!

Yeah right. 😕

In Buddhism there are no co-incidences.

By Strangely

Founding member of the band Crawling Chaos from the North-East of England

One comment

  1. @addisfant

    You should chant Nam Myoho Renge Kyo mate, and realise the potential within yourself and that all life is both temporary and precious. Get back and I’ll show you how!

Comments are closed.