[geeklog-devel] About the forum spammer

Tom Willett tomw at pigstye.net
Wed Jan 19 10:10:18 EST 2005

On 1/17/2005 3:18 PM, Dirk Haun wrote:

>Found this:
>    http://wordpress.org/support/topic.php?id=20956
>It's about a known case of comment spamming in weblogs. The author
>noticed that all the domains used in the comment spams resolve to the
>same IP address,
>And look what we just got (thanks Tom, thanks SpamX plugin!):
>| Please check some helpful info about<A HREF="http://internet-
>| poker.fidelityfunding.net/"> internet poker
>dirk at terra:dirk> ping fidelityfunding.net
>PING fidelityfunding.net ( 56 data bytes
>The nice thing is that he's also setting up bogus "account terminated"
>pages (try the above URL).
>Anyway, the IP address might be another filter criterion, instead of
>having to update the blacklist all the time. Anyone wanting to write a
>SpamX module for this?
>MT Blacklist is lagging behind, btw. The last few spam posts were only
>caught because they contained "texas holdem" - whatever that is, but it
>appears in all those posts.
>bye, Dirk
Here you go. 


Tom Willett
tomw at pigstye.net

-------------- next part --------------
A non-text attachment was scrubbed...
Name: Spamx.IP.tar.gz
Type: application/x-gzip
Size: 1482 bytes
Desc: not available
URL: <https://pairlist8.pair.net/pipermail/geeklog-devel/attachments/20050119/39b511ad/attachment.bin>

More information about the geeklog-devel mailing list