94.102.60.151

94.102.60.150 – 94.102.60.153 Comment Spam Update

3 Comments
November 13  |  Black Hat  |   Ryan Clark

So I managed to get a listing from Project Honeypot on all the latest nasty activity and it shows the whole C class is up to no good and gives us an idea of the numbers this person has spammed. If you want to support Project Honeypot you can install the WP-Honeypot plugin which will help you fight comment SPAM.

Tagged , , , , , ,

Comment SPAM From 94.102.60.150 – 94.102.60.153

19 Comments
November 12  |  Black Hat  |   Ryan Clark

I’ve noticed a HUGE increase today in spam coming from these four IP’s(94.102.60.150, 94.102.60.151
94.102.60.152, 94.102.60.153) which are originating from Amsterdam. To me it looks like someone is testing out a new comment spam tool and it’s now being reported across the Internet. I’ve already seen some active topics about this spammer from other bloggers and I’d like to here if any of you are experiencing the same thing. All the posts are generated from a random name and email but all are producing a weird “hash” mixed with numbers and letters.

My guess is that this person is gather a giant list of all the spammable WordPress blogs and we will soon be hit with an even larger comment spam attack. I know that the digital world is just coming over the hump of Xrumer spam, but I hope you all block these IP’s within wordpress to avoid getting dropped into some spammers comment list. You can use your .htaccess to block IP addresses, and if you don’t know how to do that click on this link for a tutorial. I’ve got over 20 postings just today from the same three ip addresses so it seems like things are heating up.Here are a few blog posts on the topic as well another good look at some of the SPAM;

http://wordpress.org/support/topic/217088

http://newyorktraveler.net/getting-spammed-like-crazy-today/

http://aldebaranwebdesign.com/blog/wordpress-comment-spam-from-amsterdam/

Tagged , , , , ,