Recent spam in comments

It may be a good idea to let the webhost of this site alerted too.

So how do you get rid of this nasty little post virus?

I’ve recieved about 300 coments in the past 24 hours on my site for the same url’s as above (they’re coming in faster now… about 2 or 3 per minute).
I haven’t signed up for blogexplosion.
I came here searching for blacklist software (like MT-Blacklist). I see mention of WPBlacklist and will install that.
Joy, oh joy!

Seems like someone is busy – I’ve been getting these same comment postings the last couple of days and I didn’t signup anywhere either. Funny thing to me that they are commenting on a WP that I just installed in a SUB directory for testing purposes only.
Now, how in the heck does a spammer find a WP blog setup in a SUB directory?
Very strange and hard for my limited technical mind to comprehend. Much like it’s hard for me to understand how they can fake or change IPs. I’m on cable modem though – static IP.

does your test blog ping anything?

@charle97 –
ahh…good catch. I guess it does automatically pings the “pingomatic” as setup in default. Forgot about that.

I will read this thread thoroughly to figure out what to do about this. I was attacked by spam and it added 8 comments to each and every entry in my blog.
The only difference between my posting yesterday is that I was using a wireless internet connection (at a hotel).

I got the same spam comments 2 days ago. I came to the support forum and used the “post file rename” suggestion yesterday. Today I have no spam comments. However, I haven’t made a new post yet. I will do that today and see what happens.

Well, I just posted a new blog and almost immediately, a spam comment appeared. I guess I’ll have to read all the posts on spam to see what can be done.

I was attacked by the texas holdem and online casino as well. Just installed the WP-Blacklist and no problems so far *crosses fingers*

I installed WPBlacklist about 30 seconds after my previous post.
Fahim… you are a GOD!! Thank you!
Does anyone know for sure how this is being done? My assumption is they have a perl script (or something similar) that’s doing an autofill on the form. If this is the case, would renaming variables and changing the order of the input boxes stop them?

Seems that simply (in version 1.2) changing the name of the files + modifiing links to them (ok, my idea of simple…. never mind) worked, though I did add a few words in the anti-spam control interface…. ?? Well, that’s a relief….

They aren’t actually auto-filling the form :p They are sending a POST command with the correct variable names and the values for those variables to the script specified in the comments form to handle form input. Renaming the script file (and changing the two WP core files which also called the same file) and changing variable names seemed to work fine for a while. But all of yesterday, I kept on getting spam comments at the rate of like 1 a minute – so either somebody has written a new, smarter script or somebody sat down and figured out my changes manually just for me :p

Here’s another wrinkle to help clear out the spam comments in the moderation queue.
Edit /wp-admin/moderation.php to change the default radio button from “do nothing” to “delete”. Makes it easy to do a global delete of the comments, instead of having to check “delete” for each one.
In moderation.php, find this language:
<input type=”radio” name=”comment[<?php echo $comment->comment_ID; ?>]” id=”comment[<?php echo $comment->comment_ID; ?>]-delete” value=”delete”/> <label for=”comment[<?php echo $comment->comment_ID; ?>]-delete”><?php _e(‘Delete’) ?></label>
<input type=”radio” name=”comment[<?php echo $comment->comment_ID; ?>]” id=”comment[<?php echo $comment->comment_ID; ?>]-nothing” value=”later” checked=”checked” /> <label for=”comment[<?php echo $comment->comment_ID; ?>]-nothing”><?php _e(‘Do nothing’) ?></label>
Move the ‘checked=”checked”‘ value from ‘Do nothing’ to ‘Delete’:
<input type=”radio” name=”comment[<?php echo $comment->comment_ID; ?>]” id=”comment[<?php echo $comment->comment_ID; ?>]-delete” value=”delete” checked=”checked” /> <label for=”comment[<?php echo $comment->comment_ID; ?>]-delete”><?php _e(‘Delete’) ?></label>
<input type=”radio” name=”comment[<?php echo $comment->comment_ID; ?>]” id=”comment[<?php echo $comment->comment_ID; ?>]-nothing” value=”later”/> <label for=”comment[<?php echo $comment->comment_ID; ?>]-nothing”><?php _e(‘Do nothing’) ?></label>
Now the default for comments awaiting moderation is “delete”, so you can clean them out with one click.

jwurster,
You need to read TG’s code here: https://tamba2.org.uk/wordpress/spam/#seven