[wp-hackers] Spam load

[Kimmo Suominen]

Maxthon is a tabbed version of IE -- I even see IE7 with Maxthon in
my logs.  (None of which are posting comments -- spam or real...)

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; InfoPath.1; .NET CLR 2.0.50727)

Best regards,
+ Kimmo
-- 
<A HREF="http://kimmo.suominen.com/">Kimmo Suominen</A>

On Wed, Dec 27, 2006 at 10:54:39AM +0100, C. Rummel wrote:
> Oh, yes, absolutely. My site got hammered by requests to
> wp-comments-post.php every few seconds. All requests had a UserAgent
> of "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Maxthon)"
> and so many different IP-addresses it obviously was caused by a bot
> net.
> 
> I switched from SpamKarma to Akismet, renamed wp-comments-post.php and
> denied all requests to the old wp-comments-post.php - which obviously
> didn't scare away manually submitted commentspam, but relieved the
> server from a lot of PHP-work.
> 
> Today not a single Maxthon-UserAgent so far.
> 
> Chris
> 
> On 12/27/06, steve caturan <scaturan at negimaki.com> wrote:
> >yep, for the past ~2 weeks...been observing a spike (using tail -f )
> >in POST requests made to ~/wp-comments.php on my installations.
> >mod_security has been busy issuing 412:precondition failed errors for
> >matching filters, still there are dozens of keywords/phrases that go
> >through, hopefully those using Akismet, SK or Bad Bahavior will have
> >an added layer of protection - less database pollution. :)
> >
> >On 12/27/06, Matt Mullenweg <m at mullenweg.com> wrote:
> >> Has anyone gotten in trouble with their host because of the recent
> >> comment spam spike?
> _______________________________________________
> wp-hackers mailing list
> wp-hackers at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-hackers
>