Chris Rasmussen · Photographer · Infrastructure Guy · Code Dabbler · Traveller

Russian forum comment spam from 89.185.88.241 and 89.185.88.237

I checked my site’s spam queue today and found that I suddenly had 10 comments that were identified as spam by the Wordpress plugin Akismet (this sites uses the Wordpress blogging engine, the best blogging engine available in my opinion). Here are the details of the comments …

For a start, they were all in Russian and were all from the same IP address range. My particular comments all originated from 1 of 2 IP addresses:

89.185.88.241
89.185.88.237

I had a bit of a WTF moment too seeing as 2 of the comments accused me of stealing content written on other websites and publishing it as my own.

It’s also particularly frustrating considering Digital Formula makes use of a Captcha plugin to try and eliminate bot comment spam.

A quick Google search found quite a few pages that all but confirm that the comments are in fact spam even though a couple of them appeared to be genuine comments saying good things about the articles’ content. I used Google Translate to read the comments seeing as my ability to translate Russian is completely nonexistent.

This link relates directly to one of the addresses I was getting comments from …

http://www.stopforumspam.com/ipcheck/89.185.88.237

… and this link relates to another IP address in the same range that is also suspected of doing spammy stuff.

http://projecthoneypot.org/ip_89.185.89.23

Here’s a link to a screenshot of how come of the comments looked in the Wordpress admin screen.

Spam Screenshot

Might be an idea to watch out for these addresses as spam originators …

banner ad

One Response to “Russian forum comment spam from 89.185.88.241 and 89.185.88.237”

  1. sis says:

    seems like we had the same visitors. seeing 12 russian comments in spam queue is quite strange, so i also had “a bit of a WTF moment” ;]
    regards.

Leave a Reply

Powered by Wordpress | Designed by Elegant Themes