Oct 262008
 

Last updated on November 20th, 2015

Now I may like to think I’m a literary genius but I am realistic enough to realise I’m not! So what happened was that I got lots of notional referrals sequentially on one post, all trying to comment at the same time! Then after a few minutes the same would happen to another posting – for days!

Take this one, https://strangelyperfect.tv/325/mucca-chucka/ The story of McCartney and his ex-wife is long dead, but suddenly loads of “people” wanted to comment on my particular post.

From 19:44 to 19:54 on one day I had these attempts on /wp-comments-post.php using the address https://strangelyperfect.tv/325/mucca-chucka/, the ugly permalink version.

One other commonality, was that they all came from computers running Windows XP and IE6.0! This is the start of a manual list

  • 19:54:14 c-66-176-114-144.hsd1.fl.comcast.net
  • 19:54:10 190-78-43-192.dyn.dsl.cantv.net

Then I decided that this dump of 40 hits onto the page processed in Microsoft Access on my PC, is a bit easier to do.   😉 The timestamps show the hits at about 4 seconds apart on average, looking at them.

timestampipurlrequestedreferrer
122481015867.168.82.8/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487745978.52.135.239/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487746964.93.242.160/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
1224877479200.90.100.101/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487748374.195.96.97/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487748867.240.194.136/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
1224877495201.234.158.190/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487750124.18.48.87/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
1224877507201.210.84.20/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487751175.64.151.10/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487753187.11.187.128/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
1224877729213.65.154.50/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487773374.197.59.195/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487773964.193.76.17/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487774576.113.136.159/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
1224877767216.254.234.100/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487777480.218.206.15/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487777989.39.196.67/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487778391.184.221.107/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487778924.181.255.167/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487782167.84.15.157/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
1224877826207.255.50.176/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487782968.118.187.171/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487783485.201.103.17/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487784018.111.37.183/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
1224877921220.55.152.45/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487792689.178.98.12/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
1224877931213.114.192.69/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487793998.176.13.130/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487794272.228.20.201/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487799968.191.158.23/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487800393.156.138.228/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487800699.236.181.12/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487801169.14.134.227/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487802074.192.226.71/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
1224878043208.101.109.213/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487804624.100.17.186/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
1224878050190.78.43.192/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487805466.176.114.144/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/
122487806262.123.4.141/wp-comments-post.phphttps://strangelyperfect.tv/325/mucca-chucka/

Sample WHOIS data:

  • 62.123.4.141  Italy ISP
  • 66.176.114.144  Comcast NJ ISP
  • 190.78.43.192  Venezuela ISP
  • 24.100.17.186  New Wave Comms ISP
  • 208.101.109.213  Ontario ISP
  • 74.192.226.71  Texas ISP

I imagine they are all going to be the same sort of thing…

So somewhere, hiding in these big-brand ISPs are little PCs that all at once, all of a sudden, all wanted to post a comment on a posting that I did months ago!

Yeah right. 😕

In Buddhism there are no co-incidences.

  One Response to “Example of Sustained Spam Comment Attacks on a single WordPress Posting”

  1. @addisfant

    You should chant Nam Myoho Renge Kyo mate, and realise the potential within yourself and that all life is both temporary and precious. Get back and I’ll show you how!

 Leave a Reply

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

(required)

(required)

© 1977, Strangely Perfect.