[wp-hackers] Spam load

[C. Rummel]

Oh, yes, absolutely. My site got hammered by requests to
wp-comments-post.php every few seconds. All requests had a UserAgent
of "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon)"
and so many different IP-addresses it obviously was caused by a bot
net.

I switched from SpamKarma to Akismet, renamed wp-comments-post.php and
denied all requests to the old wp-comments-post.php - which obviously
didn't scare away manually submitted commentspam, but relieved the
server from a lot of PHP-work.

Today not a single Maxthon-UserAgent so far.

Chris

On 12/27/06, steve caturan <scaturan at negimaki.com> wrote:
> yep, for the past ~2 weeks...been observing a spike (using tail -f )
> in POST requests made to ~/wp-comments.php on my installations.
> mod_security has been busy issuing 412:precondition failed errors for
> matching filters, still there are dozens of keywords/phrases that go
> through, hopefully those using Akismet, SK or Bad Bahavior will have
> an added layer of protection - less database pollution. :)
>
> On 12/27/06, Matt Mullenweg <m at mullenweg.com> wrote:
> > Has anyone gotten in trouble with their host because of the recent
> > comment spam spike?