Comments on: As of today the Bulgarians have switched to trackback spam

By: soyan stoyanov

soyan stoyanov — Wed, 12 Apr 2006 23:49:50 +0000

Ann, Ann, I can not believe how ignorant you are.

By: Henk van de Goor

Henk van de Goor — Wed, 23 Feb 2005 21:27:52 +0000

Uhm, I use serendipity and I turned on the option Force captchas which forces someone to type in a code from a picture. This should be adequate for Serendipity users I guess…

By: HH

HH — Thu, 03 Feb 2005 21:54:24 +0000

Help Ann Elisabeth! I’ve gotten dozens and dozens of trackback spams a night… e-mail me at TVsHenry at aol dot com and help me fix this! Thanks…

By: The Cartoonist

The Cartoonist — Thu, 03 Feb 2005 20:32:47 +0000

Hello there,
Thanks to the Haloscan Comment system, I have almost no comment or trackback spam. Instead I’m getting lots of referrer spam (those dreadful poker sites), when checking my logs. Any idea how to block those? My webhosting company has this nice little control panel, with the option “IP-Deny Manager” - but do I have to enter every and each single IP of those spammers in there, or just the main one? Ann Elisabeth, if possible, send me a mail please.

By: Ann Elisabeth

Ann Elisabeth — Wed, 02 Feb 2005 00:16:50 +0000

Jeff: One more thing. I didn’t realize you thought RIPE was one big ISP. It’s not. It’s just that whenever you check an IP number in Europe that comes up. You need to check the whois at whois.ripe.net to find the actual ISP. And, as a European, I find the idea of blocking all of RIPE’s IP numbers distasteful…

By: Ann Elisabeth

Ann Elisabeth — Tue, 01 Feb 2005 22:59:03 +0000

Cynical Nation: I renamed my comment script as well. That works with some spammers. It does NOT work with the Bulgarians. Their script is intelligent enough to scrape the name of the script from one of your posts.

By: Cynical Nation

Cynical Nation — Tue, 01 Feb 2005 20:31:37 +0000

FWIW, I completely solved my comments spam a while back by simply renaming my comment script from the default “mt-comments.cgi” to something random like “bite-me.cgi.” I made the appropriate change to mt.conf, rebuilt, and problem solved. I didn’t need MT-Blacklist.

I have been getting some trackback spam today, so I may try a similar approach with that. I can keep you posted.

By: The Glittering Eye

The Glittering Eye — Tue, 01 Feb 2005 19:39:23 +0000

Catching my eye: morning A through Z (UPDATED)

It’s a gray and dreary February-sort of day both here in Chicago and, apparently, in the blogosphere. Here’s what’s caught my eye this morning: Beldar is back and training his sights on John Kerry again. Wretchard of Belmont Club makes…

By: Ann Elisabeth

Ann Elisabeth — Tue, 01 Feb 2005 17:45:16 +0000

Jeff: I’d say it’s a bad way to block them, yeah!

I got a nice big 403 when I tried to access your site. I’m one of those Europeans you blocked, LOL!

Cindy: From what you told me before, I didn’t think the Bulgarians was stopped by that. Have you tested against domain names to figure out if we’re talking about the same spammer? Like I said, from what you said before, it doesn’t sound like it. Unless these are also using software built on that proxy.

By: cindy

cindy — Tue, 01 Feb 2005 14:55:34 +0000

Mike, those are the same guys using pinappleproxy! I have them in my logs. Block them in your htaccess.

# pineapple baby - comment spammer - shhhhh
RewriteCond %{HTTP:VIA} ^.+pinappleproxy
RewriteRule .* - [L,F]