www.tigerspice.com spam

I’m curious …
Is www.ads-software.com a emwordpressem powered site??

SpamWordBlock is obsolete in WordPress v1.5 (IOW, the function has been included with WordPress v1.5). See this for more info: https://codex.www.ads-software.com/Combating_Comment_Spam#Comment_Blacklist

As probably mentioned here hundreds of times, you may just want to add tigerspice to the Comment Blacklist, which will automatically trash any comments or trackbacks with “tigerspice” in them. Or, use Spam Karma: https://unknowngenius.com/blog/wordpress/spam-karma/

Other anti-spam resources:
https://codex.www.ads-software.com/Combating_Comment_Spam

Spot on James,

I added tigerspice to my blacklist (in Options -> Discussion) and voila, no more tigerspice spam!

I, too, have Spam Karma set to normal. It took care of every spam attempt, banned the slime ball, and now I am sitting pretty until a new one comes along. ??

Tigerspice (aka the p*ker spammer) mainly uses open proxies to send spam and I’ve managed to get six of them “closed” recently. In 1.2.2, using spam words alone puts TS into moderation. However, TS is also trying trackbacks (also moderated). What I haven’t seen is TS sending spam as comments to posts that don’t exist yet. That sounds like the problem that edcassin is having. The answer to that, of course, is here https://www.tamba2.org.uk/wordpress/spam/ (a must-read document).

a€￠ SpamKarma is/was takes out the TigerSpice trackbacks – good. However I found that (unfortunately) SpamKarma also messes up the stock WP functionality of first/new commenter being moderated after which commenter can go straight through without moderation. With SK activated all new commenting got straight on without being paused for initial moderation – not good.

a€￠ Now returned to stock WP (no SK) but with the <moderate-trackback.php> plugin. Contents of which are (plaudits to author)…

‘<?php
/*
Plugin Name: Moderate Trackbacks
Plugin URI: https://mtdewvirus.com/code/
Description: Puts trackbacks not marked as ‘spam’ into moderation.
Author: Nick Momrik
Version: 1.2
Author URI: https://mtdewvirus.com/
*/

function mdv_moderate_trackback($approved) {
global $wp_query;

if (1 == $approved && $wp_query->is_trackback)
$approved = 0;

return $approved;
}

add_filter(‘pre_comment_approved’, ‘mdv_moderate_trackback’);
?>’

This is holding the TS people’s trackback attempts in the moderation queue (ie out of sight).

The problem seems to be the legacy posts (ie that have PingBack/TrackBack ticked). All new posts are going out with that unticked:~|

Got to go out now and leave the site running…

I just recently posted on my blog about this. You can try this:


mysql> ALTER TABLE wp_comments ADD CONSTRAINT
FOREIGN KEY (comment_post_id) REFERENCES wp_posts(ID);


This will help with the comments that are made to posts that don’t exist yet.

I posted some PostgreSQL specific tips that could be utilized to fight some of these spam attacks as well here:

Combating comment spam with PostgreSQL.

Cheers,

Robby

Robby, the bug which allowed bots to comment on nonexistent posts has been fixed since v1.2.2.

I just ran a whois query on tigerspice.com it seems that their account has been suspeded for spam. The DNS server addresses were NS1.SUSPENDED-FOR-SPAM.COM

That’s good news, but don’t let your guard down. Rogue spam bots tend to run for at least another week or so after their site has been disabled.

I used SPAM Karma & it automatically eats up the SPAM. This plugin cool.

I have deployed it here: https://darshan.joggroup.com

The spammers put up fake front pages to make it look like the account was already suspended so people don’t contact the hosts. It’s a front, you can still find subpages on the site.

To clarify, Podz’s spam document is a little out of date. First thing you should do is upgrade to 1.5, stat. Then use the open proxy blocker, emergent registration, moderation, and the blacklist to control unwanted comments on your site. Then and only then, if you still have a problem, would I recommend going to third party plugins. Double-check that the plugin is written for 1.5 before installing it. If you’re not sure, contact the plugin author.

If you run a whois query on SUSPENDED-FOR-SPAM.COM – you’ll find that it is registered to the same person (i.e. fake contact info) from tiger$pice…it seems this was a ploy to get people to stop reporting him.

I did a little write up about it on my blog, and it seems his page is back up and there are currently 5 other websites being hosted on the SUSPENDED-FOR-SPAM.COM account. It seems like he’s trying to “see what works” to get rankings in the different engines.

I had some spam on p&ker yesterday…same ruse with suspended-for-spam.com. And this time the spammer wasn’t using an open proxy…it was direct from him at 216.195.44.106 (this address was seen in open proxy access logs previously).

Have you tried the new akismet available with WP2? You will have to get an API key from wordpress (see your account or the original email you recieved for the key)