Welcome to Geeklog, Anonymous Monday, April 29 2024 @ 05:56 am EDT
Geeklog Forums
Comment Spam Attempts
Status: Banned
gtgillis
Forum User
Full Member
Registered: 11/05/03
Posts: 121
I think I have a bot trying to post comments on two of my sites.
Take a look at one of my logs and you can see the CMT_saveComment lines. I am glad anonymous comments are disabled or I would have a nightmare on my hands.
09/08/06 01:39:46 - Trackback verification: Got HTTP response code 302 when requesting http://amellarrieux.mp3-songs.info/
09/08/06 08:24:42 - CMT_saveComment: IP address 213.147.3.80 attempted to save a comment with anonymous comments disabled for site.
09/08/06 14:49:05 - CMT_saveComment: IP address 213.147.3.80 attempted to save a comment with anonymous comments disabled for site.
09/08/06 17:09:37 - CMT_saveComment: IP address 213.147.3.80 attempted to save a comment with anonymous comments disabled for site.
09/08/06 22:41:49 - CMT_saveComment: IP address 81.190.252.242 attempted to save a comment with anonymous comments disabled for site.
09/09/06 10:08:11 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/09/06 12:00:42 - CMT_saveComment: IP address 196.12.144.39 attempted to save a comment with anonymous comments disabled for site.
09/09/06 12:46:25 - CMT_saveComment: IP address 193.220.24.8 attempted to save a comment with anonymous comments disabled for site.
09/09/06 19:04:49 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/09/06 20:55:49 - CMT_saveComment: IP address 209.203.227.139 attempted to save a comment with anonymous comments disabled for site.
09/10/06 00:44:55 - CMT_saveComment: IP address 213.147.3.80 attempted to save a comment with anonymous comments disabled for site.
09/10/06 04:45:27 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/10/06 08:23:15 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/10/06 16:40:31 - CMT_saveComment: IP address 80.130.97.32 attempted to save a comment with anonymous comments disabled for site.
09/10/06 19:45:30 - CMT_saveComment: IP address 198.140.38.43 attempted to save a comment with anonymous comments disabled for site.
09/10/06 20:24:15 - CMT_saveComment: IP address 200.209.161.15 attempted to save a comment with anonymous comments disabled for site.
09/11/06 00:34:42 - CMT_saveComment: IP address 200.55.119.228 attempted to save a comment with anonymous comments disabled for site.
09/11/06 03:19:41 - CMT_saveComment: IP address 60.49.242.74 attempted to save a comment with anonymous comments disabled for site.
09/11/06 04:12:25 - CMT_saveComment: IP address 220.247.200.74 attempted to save a comment with anonymous comments disabled for site.
09/11/06 05:02:15 - CMT_saveComment: IP address 220.16.255.6 attempted to save a comment with anonymous comments disabled for site.
09/11/06 05:09:56 - CMT_saveComment: IP address 220.145.52.211 attempted to save a comment with anonymous comments disabled for site.
09/11/06 05:32:14 - CMT_saveComment: IP address 211.192.45.160 attempted to save a comment with anonymous comments disabled for site.
09/11/06 06:21:37 - CMT_saveComment: IP address 210.235.224.249 attempted to save a comment with anonymous comments disabled for site.
09/11/06 06:41:24 - CMT_saveComment: IP address 210.235.224.249 attempted to save a comment with anonymous comments disabled for site.
09/11/06 07:13:23 - CMT_saveComment: IP address 219.185.52.106 attempted to save a comment with anonymous comments disabled for site.
09/11/06 07:57:12 - CMT_saveComment: IP address 219.185.52.106 attempted to save a comment with anonymous comments disabled for site.
09/11/06 08:55:59 - CMT_saveComment: IP address 219.199.148.171 attempted to save a comment with anonymous comments disabled for site.
09/11/06 09:46:25 - CMT_saveComment: IP address 200.159.192.35 attempted to save a comment with anonymous comments disabled for site.
09/11/06 09:57:22 - CMT_saveComment: IP address 220.105.101.29 attempted to save a comment with anonymous comments disabled for site.
09/11/06 10:34:28 - CMT_saveComment: IP address 218.154.36.136 attempted to save a comment with anonymous comments disabled for site.
09/11/06 11:40:04 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/11/06 12:28:18 - CMT_saveComment: IP address 211.205.20.105 attempted to save a comment with anonymous comments disabled for site.
09/11/06 15:49:03 - CMT_saveComment: IP address 203.218.31.189 attempted to save a comment with anonymous comments disabled for site.
09/11/06 16:45:10 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/11/06 23:21:08 - CMT_saveComment: IP address 203.172.186.42 attempted to save a comment with anonymous comments disabled for site.
09/12/06 04:24:36 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/12/06 05:23:42 - CMT_saveComment: IP address 210.56.16.223 attempted to save a comment with anonymous comments disabled for site.
09/12/06 07:18:09 - CMT_saveComment: IP address 61.246.232.212 attempted to save a comment with anonymous comments disabled for site.
09/12/06 07:37:13 - CMT_saveComment: IP address 221.90.219.67 attempted to save a comment with anonymous comments disabled for site.
09/12/06 10:32:21 - CMT_saveComment: IP address 210.105.112.145 attempted to save a comment with anonymous comments disabled for site.
09/12/06 11:30:59 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/12/06 11:32:43 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/12/06 12:08:12 - CMT_saveComment: IP address 210.105.112.145 attempted to save a comment with anonymous comments disabled for site.
09/12/06 14:06:14 - CMT_saveComment: IP address 195.134.66.82 attempted to save a comment with anonymous comments disabled for site.
09/12/06 15:26:14 - CMT_saveComment: IP address 195.134.66.82 attempted to save a comment with anonymous comments disabled for site.
09/12/06 16:47:20 - CMT_saveComment: IP address 129.41.250.20 attempted to save a comment with anonymous comments disabled for site.
Anyone seeing this?
I also noticed this. Anyone seen this before?
Mon Sep 4 13:01:10 2006 - 1054: Unknown column 'bce0c7789dca495a' in 'where clause'. SQL in question: SELECT fullname FROM gl_users WHERE bce0c7789dca495a
Mon Sep 4 13:02:41 2006 - 1054: Unknown column 'd6602ffa4d02aa59' in 'where clause'. SQL in question: SELECT fullname FROM gl_users WHERE d6602ffa4d02aa59
Mon Sep 4 13:03:16 2006 - 1054: Unknown column 'eef379b8da8f35a3' in 'where clause'. SQL in question: SELECT fullname FROM gl_users WHERE eef379b8da8f35a3
Mon Sep 4 13:04:11 2006 - 1054: Unknown column '63216257b677f017' in 'where clause'. SQL in question: SELECT fullname FROM gl_users WHERE 63216257b677f017
Mon Sep 4 13:04:43 2006 - 1054: Unknown column 'aa5d272e8fed7221' in 'where clause'. SQL in question: SELECT fullname FROM gl_users WHERE aa5d272e8fed7221
Take a look at one of my logs and you can see the CMT_saveComment lines. I am glad anonymous comments are disabled or I would have a nightmare on my hands.
Text Formatted Code
09/08/06 01:39:46 - Trackback verification: Got HTTP response code 302 when requesting http://amellarrieux.mp3-songs.info/
09/08/06 08:24:42 - CMT_saveComment: IP address 213.147.3.80 attempted to save a comment with anonymous comments disabled for site.
09/08/06 14:49:05 - CMT_saveComment: IP address 213.147.3.80 attempted to save a comment with anonymous comments disabled for site.
09/08/06 17:09:37 - CMT_saveComment: IP address 213.147.3.80 attempted to save a comment with anonymous comments disabled for site.
09/08/06 22:41:49 - CMT_saveComment: IP address 81.190.252.242 attempted to save a comment with anonymous comments disabled for site.
09/09/06 10:08:11 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/09/06 12:00:42 - CMT_saveComment: IP address 196.12.144.39 attempted to save a comment with anonymous comments disabled for site.
09/09/06 12:46:25 - CMT_saveComment: IP address 193.220.24.8 attempted to save a comment with anonymous comments disabled for site.
09/09/06 19:04:49 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/09/06 20:55:49 - CMT_saveComment: IP address 209.203.227.139 attempted to save a comment with anonymous comments disabled for site.
09/10/06 00:44:55 - CMT_saveComment: IP address 213.147.3.80 attempted to save a comment with anonymous comments disabled for site.
09/10/06 04:45:27 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/10/06 08:23:15 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/10/06 16:40:31 - CMT_saveComment: IP address 80.130.97.32 attempted to save a comment with anonymous comments disabled for site.
09/10/06 19:45:30 - CMT_saveComment: IP address 198.140.38.43 attempted to save a comment with anonymous comments disabled for site.
09/10/06 20:24:15 - CMT_saveComment: IP address 200.209.161.15 attempted to save a comment with anonymous comments disabled for site.
09/11/06 00:34:42 - CMT_saveComment: IP address 200.55.119.228 attempted to save a comment with anonymous comments disabled for site.
09/11/06 03:19:41 - CMT_saveComment: IP address 60.49.242.74 attempted to save a comment with anonymous comments disabled for site.
09/11/06 04:12:25 - CMT_saveComment: IP address 220.247.200.74 attempted to save a comment with anonymous comments disabled for site.
09/11/06 05:02:15 - CMT_saveComment: IP address 220.16.255.6 attempted to save a comment with anonymous comments disabled for site.
09/11/06 05:09:56 - CMT_saveComment: IP address 220.145.52.211 attempted to save a comment with anonymous comments disabled for site.
09/11/06 05:32:14 - CMT_saveComment: IP address 211.192.45.160 attempted to save a comment with anonymous comments disabled for site.
09/11/06 06:21:37 - CMT_saveComment: IP address 210.235.224.249 attempted to save a comment with anonymous comments disabled for site.
09/11/06 06:41:24 - CMT_saveComment: IP address 210.235.224.249 attempted to save a comment with anonymous comments disabled for site.
09/11/06 07:13:23 - CMT_saveComment: IP address 219.185.52.106 attempted to save a comment with anonymous comments disabled for site.
09/11/06 07:57:12 - CMT_saveComment: IP address 219.185.52.106 attempted to save a comment with anonymous comments disabled for site.
09/11/06 08:55:59 - CMT_saveComment: IP address 219.199.148.171 attempted to save a comment with anonymous comments disabled for site.
09/11/06 09:46:25 - CMT_saveComment: IP address 200.159.192.35 attempted to save a comment with anonymous comments disabled for site.
09/11/06 09:57:22 - CMT_saveComment: IP address 220.105.101.29 attempted to save a comment with anonymous comments disabled for site.
09/11/06 10:34:28 - CMT_saveComment: IP address 218.154.36.136 attempted to save a comment with anonymous comments disabled for site.
09/11/06 11:40:04 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/11/06 12:28:18 - CMT_saveComment: IP address 211.205.20.105 attempted to save a comment with anonymous comments disabled for site.
09/11/06 15:49:03 - CMT_saveComment: IP address 203.218.31.189 attempted to save a comment with anonymous comments disabled for site.
09/11/06 16:45:10 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/11/06 23:21:08 - CMT_saveComment: IP address 203.172.186.42 attempted to save a comment with anonymous comments disabled for site.
09/12/06 04:24:36 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/12/06 05:23:42 - CMT_saveComment: IP address 210.56.16.223 attempted to save a comment with anonymous comments disabled for site.
09/12/06 07:18:09 - CMT_saveComment: IP address 61.246.232.212 attempted to save a comment with anonymous comments disabled for site.
09/12/06 07:37:13 - CMT_saveComment: IP address 221.90.219.67 attempted to save a comment with anonymous comments disabled for site.
09/12/06 10:32:21 - CMT_saveComment: IP address 210.105.112.145 attempted to save a comment with anonymous comments disabled for site.
09/12/06 11:30:59 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/12/06 11:32:43 - CMT_saveComment: IP address 202.143.133.242 attempted to save a comment with anonymous comments disabled for site.
09/12/06 12:08:12 - CMT_saveComment: IP address 210.105.112.145 attempted to save a comment with anonymous comments disabled for site.
09/12/06 14:06:14 - CMT_saveComment: IP address 195.134.66.82 attempted to save a comment with anonymous comments disabled for site.
09/12/06 15:26:14 - CMT_saveComment: IP address 195.134.66.82 attempted to save a comment with anonymous comments disabled for site.
09/12/06 16:47:20 - CMT_saveComment: IP address 129.41.250.20 attempted to save a comment with anonymous comments disabled for site.
Anyone seeing this?
I also noticed this. Anyone seen this before?
Text Formatted Code
Mon Sep 4 13:01:10 2006 - 1054: Unknown column 'bce0c7789dca495a' in 'where clause'. SQL in question: SELECT fullname FROM gl_users WHERE bce0c7789dca495a
Mon Sep 4 13:02:41 2006 - 1054: Unknown column 'd6602ffa4d02aa59' in 'where clause'. SQL in question: SELECT fullname FROM gl_users WHERE d6602ffa4d02aa59
Mon Sep 4 13:03:16 2006 - 1054: Unknown column 'eef379b8da8f35a3' in 'where clause'. SQL in question: SELECT fullname FROM gl_users WHERE eef379b8da8f35a3
Mon Sep 4 13:04:11 2006 - 1054: Unknown column '63216257b677f017' in 'where clause'. SQL in question: SELECT fullname FROM gl_users WHERE 63216257b677f017
Mon Sep 4 13:04:43 2006 - 1054: Unknown column 'aa5d272e8fed7221' in 'where clause'. SQL in question: SELECT fullname FROM gl_users WHERE aa5d272e8fed7221
10
6
Quote
Status: offline
winnerdk
Forum User
Full Member
Registered: 04/24/05
Posts: 339
Location:Panama City, Republic of Panama
I've been through that (round one) and now the spammers apparently have a script that will go to the site, create a user id, and then post a comment as a registered user. That's the problem I've fighting right now and it might be related to what you are seeing.
7
3
Quote
Status: offline
Dirk
Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
Quote by winnerdk: now the spammers apparently have a script that will go to the site, create a user id, and then post a comment as a registered user.
Sounds like some old friends are still at it. In fact, I still see them trying the same on geeklog.net.
Block those IP addresses and/or follow the links the CAPTCHA add-ons.
bye, Dirk
5
9
Quote
13
Anonymous
That is one of the reasons I need to go to the latest version..my comments got hacked..
but a question about the above...the bots registering and so on.....wouldn't turning the option for new registrations to be approved by admin prior to being authenticated deter that? thanks..t
but a question about the above...the bots registering and so on.....wouldn't turning the option for new registrations to be approved by admin prior to being authenticated deter that? thanks..t
5
8
Quote
Status: offline
Dirk
Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
Quote by 13: but a question about the above...the bots registering and so on.....wouldn't turning the option for new registrations to be approved by admin prior to being authenticated deter that? thanks..t
Sure. You could end up with a lot of new users in your submission queue, but it would prevent them from posting.
bye, Dirk
3
8
Quote
onejed1
Anonymous
I would like to mention that most of my comments taht are spam have the string .:. between the links to whatever porn spam they are posting. When I add ".:." to my personal blacklist, my users are no longer able to edit their account information, and they get the Message deteted as Spam and deleted error message.
Thought i'd let you know, don't know if its a bug or if i'm doing something wrong.
Thought i'd let you know, don't know if its a bug or if i'm doing something wrong.
8
6
Quote
Status: offline
Dirk
Site Admin
Admin
Registered: 01/12/02
Posts: 13073
Location:Stuttgart, Germany
You have to keep in mind that what you enter in Spam-X are actually regular expressions. And in a regexp, the '.' has a special meaning in that it matches anycharacter. So ".:." would also match "a:b" or the "http://" in a URL (which is probably the problem with the user profile).
You would have to escape the dot with a backslash to ensure it's treated as a dot. But the Spam-X plugin in 1.4.0 (and earlier) has a problem with backslashes in the input field (that's fixed in 1.4.1). So, for the moment you should use some other pattern ...
bye, Dirk
You would have to escape the dot with a backslash to ensure it's treated as a dot. But the Spam-X plugin in 1.4.0 (and earlier) has a problem with backslashes in the input field (that's fixed in 1.4.1). So, for the moment you should use some other pattern ...
bye, Dirk
6
9
Quote
All times are EDT. The time is now 05:56 am.
- Normal Topic
- Sticky Topic
- Locked Topic
- New Post
- Sticky Topic W/ New Post
- Locked Topic W/ New Post
- View Anonymous Posts
- Able to post
- Filtered HTML Allowed
- Censored Content