Comments on: WordPress Comment Spam from Amsterdam? IP Address 94.102.60.152

By: Electric ego

Electric ego — Sun, 13 Dec 2009 11:25:23 +0000

The same happened on my blog as well. This time the culprit was a ukrainian IP. Akismet is doing a great job in filtering the junk, just don’t get why it is letting them through in the first place.

By: Jill Olkoski

Jill Olkoski — Sat, 22 Nov 2008 17:16:48 +0000

Hi DG,
Well, all I know, is that the IP addresses listed above, that I blacklisted, are now correctly being captured by Akismet, which means they aren’t showing up a normal comments, which is just what I wanted to happen. The comment by Tseung about “RIPE” was really meant for another posting of mine. In fact, I’m not sure why he posted it here, so maybe I’ll remove it.

By: DG

DG — Sat, 22 Nov 2008 01:08:54 +0000

Did we get the right culprit?

I can see why they’d be upset if the wrong person was labeled, blacklisted and akismeted.

By: Roy Van Rivero

Roy Van Rivero — Wed, 19 Nov 2008 16:01:24 +0000

I also experienced like this. I didn’t know how to blacklist. Thanks for this post. Very informative!

By: Jill Olkoski

Jill Olkoski — Wed, 19 Nov 2008 03:49:46 +0000

Hi Chris,
Thanks for the comment!

By: Tseug

Tseug — Tue, 18 Nov 2008 22:42:38 +0000

Comment removed by moderator because it violated Discussion Rules.

By: Chris Beelby

Chris Beelby — Tue, 18 Nov 2008 15:08:23 +0000

I also have gotten spam from those IP’s and others. One thing I noticed in my version of Wordpress is that blacklisting them makes the comments get automatically marked as ’spam’, but they still are stored in my Wordpress database. I started to notice that the size of my DB was growing a lot and had to implement a script to an query to clear them on regularly. Is there something I’m missing, because it seems stupid to me that the wordpress program would have a “feature” where comments are made invisible to the owner of the site and yet are kept in the database to take up space forever.

By: Jill Olkoski

Jill Olkoski — Tue, 18 Nov 2008 02:35:30 +0000

Another UPDATE: I’m getting more spam from RIPE in Amsterdam:
http://aldebaranwebdesign.com/blog/more-amsterdam-spam-212955438-from-ripe/

By: Ty

Ty — Mon, 17 Nov 2008 10:37:25 +0000

I have been coping the same thing for the past few days, i was hoping it would just stop but from the looks of this thread its not going to.. will be blocking ip’s tonight.

By: Jill Olkoski

Jill Olkoski — Sat, 15 Nov 2008 16:55:52 +0000

Folks,
Please see my UPDATE at the top. I’m now seeing these being caught by Akismet!

By: Jill Olkoski

Jill Olkoski — Thu, 13 Nov 2008 23:48:44 +0000

Hi Scott,
It certainly appears wide spread, that’s for sure. Glad you found this useful. It’s the fun thing about blogging, you get to vent and help other folks out at the same time.

By: Scott Thieman

Scott Thieman — Thu, 13 Nov 2008 23:41:56 +0000

Hi Jill,

I started noticing these “attacks” about a week ago and they have steadily increased in frequency to the point that I had to have my site rebooted due to something weird happening after an especially heavy spam hit. I’ve now blocked all the offending IP’s, so hopefully I’ve seen the last of these pests. I wasn’t aware of how wide spread this was until today, when I decided to do a search. Thanks for your helpful article!

By: Jill Olkoski

Jill Olkoski — Thu, 13 Nov 2008 23:37:32 +0000

Hi Katie,
It’s amazing how this spam is hitting everyone. Nice to hear from you!

By: Katie Kay

Katie Kay — Thu, 13 Nov 2008 23:35:29 +0000

I just received for the 1st time ever a couple of these SPAM comments on my WordPress blog this week. I could not figure out what they were because a comment wasn’t showing up on my blog entries, so I just deleted the email notice and forgot about it. So thank you for the tip on how to block them.

By: Jill Olkoski

Jill Olkoski — Thu, 13 Nov 2008 22:58:40 +0000

Hi Stephen,
I suppose the answer to that is in your Akismet section…it keeps track of what it catches…are you seeing them in there?

By: Stephen

Stephen — Thu, 13 Nov 2008 21:29:29 +0000

I got four or five of them yesterday and wondered why Akismet wasn’t catching them. I haven’t made any changes or blocked anything, but I haven’t gotten any more today…so, maybe Akismet is catching them now?

By: Jon

Jon — Thu, 13 Nov 2008 16:13:20 +0000

I’ve been getting these for the last few days also. It’s just a few, but it’s annoying that it isn’t being caught by Akismet.

By: David Niall Wilson

David Niall Wilson — Thu, 13 Nov 2008 14:11:28 +0000

I got a couple of those. I always leave my site set so that a new poster has to be approved…Akismet is never perfect, and you never know who (or what) might stop by. It is annoying…

Thanks for the tip on the blocking … but I might get readers from Amsterdam, being an author…I’d hate to block an IP range and find out that it was only in use because it had been hacked…

David

By: Irish polyglot

Irish polyglot — Thu, 13 Nov 2008 09:28:58 +0000

I got linked to you via twitter – thanks for posting!! It’s amazing how many of us are being affected… I imagine we’ll see an Akismet update shortly so we can unblock these IP addresses and future code-only messages like this are dealt with automatically. It’s definitely automated (perhaps it’s so that the email address is validated, which will automatically give that address permission to post a comment in future under some people’s settings). I don’t plan on installing Captcha just because of one clever hacker in Amsterdam

By: Brian Passavanti

Brian Passavanti — Thu, 13 Nov 2008 07:51:04 +0000

I’m seeing it too. I’m going to block the 94.X.X.X block at firewall/server level. Screw this, I’ve gotten like 30 in the last 3 hours.