September 03, 2003

It seems everywhere I turn lately, there are assholes trying to figure out a new way to annoy people by marketing to them... Using peoples resources without permission.

What is it this time? Spam in blog comments.. something that's been around for a while, but this is the first persistent idiot I found.. So for the first time, I've made use of MT's nice feature of banning an IP from posting comments.. which is so much cleaner than a service denial at apache level. Not to mention I don't have to edit my config files.

The dweeb who uses 61.181.5.147 (probably a hijacked PC or open proxy anyway) has been consistently posting comments with links to porn sites in my weblog.

Posted September 03, 2003 01:30 PM in Spam sucks
TrackBack URL for this entry: http://www.unix-girl.com/mt/mt-tb.cgi/905
Comments
On September 3, 2003 02:13 PM fluffy added:

Do people like that even think that they're going to manage to get even the slightest increase in income due to that sort of behavior?

#
On September 3, 2003 02:48 PM Harald added:

I was getting them from 61.181.5.118 and 61.181.5.155; I blocked off the whole /24 as a result. You may have to do the same...

To answer fluffy's question: Yes. The point is to get more _links_ to a website, which increases its pagerank and makes it appear earlier (preferably on the first page) in a Google search.

#
On September 3, 2003 03:19 PM Travis added:

I'd noticed those comments and suspected that it was only going to be a short amount of time before you realized it and took action and blogged about it in disgust. It was sort of liking waiting for a pressure cooker to whistle! :-)

#
On September 3, 2003 03:26 PM Chris added:

What MT needs is a "bot free" interface for comments. One of those "enter the letters and numbers in the box to the left here" things that paypal and vB use.

.. Then they'll sod off and prey on trackback and wiki .. *sigh*

#
On September 3, 2003 03:41 PM kasia added:

hm, I guess that would put a stop to it.. but it inconveniences real users and I don't like that..

I'd rather script some sort of checking mechanism.

#
On September 3, 2003 04:07 PM Wilson added:

There's a thread going on at the Kalsey Consulting blog about this (http://kalsey.com/2003/09/comment_spam/). Some of the same points are made there about the problems with "Turing-test" systems.

It definitely looks like blog comments are the next target for spammers.

#
On September 3, 2003 05:20 PM Techie2000 added:

How about you just publish a list of the IPs in a hall of shame?...:-)

#
On September 3, 2003 05:39 PM Daniel Farinha added:

I'm starting to think that blog comments should not allow links. URLs yes, but not producing the actual a href tags, even for the 'Posted by' sections. A few comments in popular blogs is enough to make you shoot up the rankings in Google...

... a bit like this comment really.
I found myself now 'owning' my surname in Google, definitely due to comments in blogs. Cool to start with, but not from an information retrieval point of view.

#
On September 4, 2003 09:03 AM Gerald added:

On 2. September I got the spam from 61.181.5.40, which seems to be located in TianJin, a city in China. You can check this with the Geobytes IPLocator at http://www.geobytes.com/iplocator.htm. Kasias Spam IP shows the same result. Checking the promoted viagra/porn links in my blog showed up with some whois entries related to TianJin too:
------------ whois excerpt -------------
No.5 DongJianLi,XiChangXiaPo,TianTai Lu,HeBei Qu
TianJin, TianJin 300230
----------------------------------------

The best of all. The spam-entry was placed as a comment on my entry about guestbook spamming (sorry, the entry is in german, but the image says a lot. it shows a guestbook entry with 1454 links on a very small area). http://www.gerald-steffens.com/blog/archives/00000037.htm
What sense!

I banned 61.181.5, but is it enough?

#
On September 4, 2003 12:01 PM kevin lyda added:

i just ran across this as well. on my todo list is to start writing scripts to get the ip addresses of the net anti-social (email spammers, people who ignore my robots.txt file, blog comment spammers) and start feeding it to a script that filters them on an ip level. i'm connected to the net via a cisco router so i'll probably write a backend to have it filter, but i might also do one for linux iptables. depending on the source of the entry i'll have the block expire after a certain number of days and have info about the address stored in a db for future use.

regardless i have the same question - what makes these people think any of these methods impress people?

#
On September 4, 2003 06:10 PM reinhard added:

I think that the spam-problem goes bigger because google ignores the guestbook entries since sep.03 and the spammers have to search new targets to place their spam. Many people comes with dynamic ip and so the ip blocking will not work.

#
On September 7, 2003 12:37 PM Melissa added:

I banned 61.181.*.*. on my blog Friday. They were regularly spamming comments, although it wasn't for porn. Anyhow, everything from 61.181.0.0 - 61.181.255.255 is taken by the same company. They're history on my blog.

Persistent little freaks, aren't they?

#
On October 11, 2003 01:41 PM Jason added:

There's a certain irony to that last comment. :P

#
On October 19, 2003 05:00 PM Jake added:

I am getting a ton of spam on my blog. Blocking I.P.'s but I am not keeping up. They must have some sort of bot that is doing it.

#
On October 22, 2003 03:39 PM Mark Carey added:

MT-Blacklist works great for fighting blog spam. I have created a Blog Spam Database where bloggers can submit and share spam domains, phrases, and IP addresses. The database can output text files that can be used with MT-Blacklist. If we all work together we can make it really difficult for the spammers. The Blog Spam Database can be found at http://www.markcarey.com/spamdb/

#
Trackbacks
A View From Home:Glad to know I'm not alone
I'm reading sites in NetNewsWire and two blogs are specifically complaining about comment spam as I did yesterday. I don't want to have to close off comments, but it's really annoying and I'm waiting for some plug-in or something that...
(read more)
September 4, 2003 02:37 PM
A View From Home:Glad to know I'm not alone
I'm reading sites in NetNewsWire and two blogs are specifically complaining about comment spam as I did yesterday. I don't want to have to close off comments, but it's really annoying and I'm waiting for some plug-in or something that...
(read more)
September 5, 2003 12:30 PM