Textpattern CMS support forum
You are not logged in. Register | Login | Help
- Topics: Active | Unanswered
Pages: 1
Got a new spam problem
Hello,
since this evening I got a new spam problem after a long period of peace — is there anyone, who’s got the same experience?
The spam comes from different IPs in short periods, so I guess it is posted automatically, not manually.
Some of these IPs are the following:
21 Jul 2008 08:43:06 PM 84.193.194.58 d54C1C23A.access.telenet.be Blog/article/3539/der-unuebersetzbare-rest?commented=0 GET 200
21 Jul 2008 08:43:04 PM 84.193.194.58 d54C1C23A.access.telenet.be Blog/article/3539/der-unuebersetzbare-rest POST 302
21 Jul 2008 08:42:33 PM 84.193.194.58 d54C1C23A.access.telenet.be Blog/article/3539/der-unuebersetzbare-rest POST 200
21 Jul 2008 08:42:21 PM 84.195.110.239 d54C36EEF.access.telenet.be Blog/article/3370/?commented=0 GET 200
21 Jul 2008 08:42:20 PM 77.98.181.76 77-98-181-76.cable.ubr02.pres.blueyonder.co.uk Blog/article/3581/loveparade?commented=0 GET 200
21 Jul 2008 08:42:20 PM 84.195.110.239 d54C36EEF.access.telenet.be Blog/article/3370 POST 302
21 Jul 2008 08:42:19 PM 77.98.181.76 77-98-181-76.cable.ubr02.pres.blueyonder.co.uk Blog/article/3581/loveparade POST 302
21 Jul 2008 08:42:17 PM 84.195.110.239 d54C36EEF.access.telenet.be Blog/article/3370 POST 200
21 Jul 2008 08:42:17 PM 77.98.181.76 77-98-181-76.cable.ubr02.pres.blueyonder.co.uk Blog/article/3581/loveparade
Remarkably enough, I did remove the whole comment form from the article’s output, but the spammers still post their requests in the moderation queue. And they post their stuff to the same 3-4 articles only.
Till now the plugin from sencer helped a lot, I watched a lot of strong spam attacks against it without any success.
Unfortunately the new attacks now seem to have won.
Is there any help, maybe an actual plugin or something?
Last edited by goncourt (2008-07-21 20:09:45)
Offline
Re: Got a new spam problem
If you look at the spam messages, do they all have the same structure? If so, give an example (replace the spam URLs with http://spammy_url)
Offline
Re: Got a new spam problem
Yes, they do:
Ndygsosz <a href=«http://http://spammy_url/profile.ssf?nickname=hedgingplan»>hedging plants</a> kdpfeozm [url=http://spammy_url/profile.ssf?nickname=hedgingplan]hedging plants[/url] ebpuzjyn [link=http://spammy_url/profile.ssf?nickname=hedgingplan]hedging plants[/link] qrssusiu [url]http://spammy_url/profile.ssf?nickname=hedgingplan[/url]
Others use nicknames with something like: garden, flowers etc. (before “profile.ssf” comes “/forums/”)
As far as I can see are they all in that manner.
(Edit: not all use that profile-thing with the nickname, but all this bbedit-code)
Last edited by goncourt (2008-07-21 20:34:22)
Offline
Re: Got a new spam problem
Install an anti-spam plugin like mrw_spamkeywords_urlcount, edit the plugin and add this before the last closing } in the plugin code:
# Ruud, 21 jul 2007, messages containing two unsupported link types
# and messages containing more than 10 links are definitely spam.
# Why bother even marking them as spam, just force a reload loop. Keep 'm busy ;)
$linktypes = 0;
foreach(array('<a href=', '<a href=', '[url=', '[link=', '[url]') as $linktype)
{
if (stristr($form_array['message'], $linktype)) $linktypes++;
}
if ($linktypes >= 2 or $urlcount > 10)
{
$evaluator -> add_estimate(RELOAD, 1);
}Offline
Re: Got a new spam problem
Ruud, would having this plug-in (which I have used before) with your little addition conflict with Manfre’s Akismet plug-in?
Stuart
In a Time of Universal Deceit
Telling the Truth is Revolutionary.
Offline
Re: Got a new spam problem
Spam plugins should be able to co-exist, if written properly. From what I’ve seen this shouldn’t be a problem. TXP.org currently uses the solution posted above, combined with Akismet and some other stuff.
Offline
Re: Got a new spam problem
Thanks a lot, ruud, seems a good one, I’ll try it.
Maybe tomorrow I’ll see the result ;)
Offline
Re: Got a new spam problem
Thanks for the code Ruud. :)
Stuart
In a Time of Universal Deceit
Telling the Truth is Revolutionary.
Offline
Re: Got a new spam problem
One day later: [x] indeed, the problem is fixed.
Great, thanks!
Offline
Pages: 1