Comment Spammersby satman
well something happened this morning where someone decided to storm my comments and leave some sort of spam posts like "Tanhks alot - your answer solved all my problems after several days struggling" . Im glad to say my defense scripts sort of worked and did not allow link backs to rubbish links but it was intriguing to discover where they originated. here is some data from the posts  ill make public so anyone can investigate further or blacklist
  • Username,   Email,   linkback,   IP of Origin
  • Lacey, g.plodiet@hotmail.jp, fHQplBiHryVCVDeA, 173.255.235.113
  • Roseanna, x.tamoufliew@novell.ch, NEuepNPiE, 83.16.130.214
  • Earthwind, yourname@yourdomain.com, LnqkEOjedESVHceXjw, 186.1.14.21
  • Seston, kelly@messymonkeyarts.com, fcrPRQQE, 201.33.97.57
  • Roxy, j4ckdaniels@web.de, PMwjyRXQSUf, 94.190.19.10
  • Loran, joi@nea.ufsc.br, uRGVwJyQmkWXOUyA, 67.192.52.186
  • Kevrel, 20oped@inq7.net, WSIVFMNia, 69.67.166.20
3 Comments #118 Friday, April 29, 2011 07:06 PM Filed in Apps
Submitted by Satman
Well further IP tracking shows a worldwide Spammer, im guessing an IP spoofer or something has been used
173.255.235.113 Absecon in United States
83.16.130.214 Cracow in Poland
186.1.14.21 located in Nicaragua
201.33.97.57 São Paulo Brazil
94.190.19.10 Ekaterinburg Russia
67.192.52.186 Michigan in United States
69.67.166.20 Vancouver Canada
posted Friday, April 29, 2011 07:24 PM 78.146.237.88: Linkback http://www.isatman.com/iBlog/Blog.aspx?id=118&cid=5
Submitted by Jaruzel
Most problably a botnet using global zombie PCs - these people don't even know that their machines are being used to post to websites and send spam email.

Interesting news article over on Ars talking about the FBI vs. one such Botnet, Coreflood:

http://arstechnica.com/tech-policy/news/2011/04/fbi-vs-coreflood-botnet-round-one-goes-to-the-feds.ars

-Jar
posted Friday, April 29, 2011 08:40 PM 86.8.240.54: Linkback http://www.fuzzybuttons.com
Submitted by Satman
Ive noticed something in common with most of these spams coming through, an invalid linkback URL so now I will check the validity of this box if it has an entry to try and stem the trash. If it continues without any linkback entries I shall try out ReCaptcha
posted Saturday, April 30, 2011 03:41 PM 127.0.0.1: Linkback
Name (Required)
Email (Required)
URI(will display as a linkback)
Comment (Required)
118 (no script tags allowed)

Custom Blog Engine Developed by Satman