Message Board

Newbie/Basic Questions

Older Posts ]   [ Newer Posts ]
 Comment Spammer catching?
Author: B.Plank2   (2 May 07 5:11pm)
I have a honeypot installed on my server for a site and I've inserted QuickLinks to my site in various places INCLUDING a post that keeps receiving comment spam.

My AKISMET keeps finding comment spam and I see on my home page here that I'm catching harvesters, but not the comment spammers.

Any ideas?
 
 Re: Comment Spammer catching?
Author: M.Prince   (2 May 07 5:38pm)
First, some comment spammers target specific pages within blog installations. Our honey pots will not catch those more discerning comment spammers. We would like to work with Akismet and others to get data on some of the comment spammers we are likely to miss.

Second, there's a small chance that the QuickLinks code is only currently reporting harvesters you're catching. You're still catching them, the catches just aren't getting reported to your stats. I need to confirm with one of our developers, but I'll check and make sure it's working as it should be.

Matthew.
 
 Re: Comment Spammer catching?
Author: B.Plank2   (2 May 07 7:34pm)
Sounds good. Let me know if you need me to send you the QuickLink that I was assigned.

One theory I have is that AKISMET is catching the spammed comment BEFORE it can register with the QuickLink. I'm going to disable the AKISMET and see if that catches anything.
 
 Re: Comment Spammer catching?
Author: B.Plank2   (2 May 07 8:45pm)
FYI- Even with AKISMET disabled, the QuicLink doesn't catch the comment spam.
 
 Re: Comment Spammer catching?
Author: M.Prince   (2 May 07 10:14pm)
Disabling or enabling Akismet won't affect QuickLink catching the comment spam. Again, one of two things is likely happening:

1. The comment spammers targeting you are not targeting forms in general, but looking for some specific pattern. Most likely, they are looking for the default names of the comment form pages in popular blogging software. It could also be that they are looking for a particular format to the forms, which the honey pots may not follow. It could also be that there is one robot that runs around finding forms and a second that then fills them out at regular intervals. If that's the case, it could be you'll continue to get posts to your site's main comment form, but you won't get posts to your honey pot until after the form-finding bot comes around again.

If you're feeling a bit sleuthy, you could look at your logs and see if the comment spammer's IP ONLY hit your comment page, or if it hit a bunch of pages on your site. If it's the latter then the most likely explanation for why the comment spammer isn't showing up in your reports is........

2. I am not 100% certain that QuickLinks are currently reporting all the comment spammers they catch. I know they are reporting harvesters. I have sent an email to one of our engineers in charge of the QuickLink reporting to figure out one way or the other for sure. It could be that you are catching the comment spammers and we're just not reporting the catch. When I get an answer -- which I expect in the next 24 hours -- I will post it here.

Again, to be clear on one very important point, Akismet will not adversely affect the operation of any traps on your site. I strongly encourage you to use Akismet, or other anti-comment spam services, in conjunction with Project Honey Pot's traps and services.
 
 Re: Comment Spammer catching?
Author: B.Plank2   (3 May 07 1:17am)
I checked my logs and the spammer only hits one page. I haven't figured out why that specific one... i use WordPress and it's a 6 month old entry. Let me know what you find out, I'd love to start having these spammers reported.
 
 Re: Comment Spammer catching?
Author: M.Prince   (3 May 07 1:08pm)
Given what you suggest, I bet that you have the two bots issue:

Bot #1 scours the web looking for forms. Those forms are then recorded.

Bot #2 returns, sometimes much later, and posts to the forms that bot #1 recorded.

If I am right, this means that your honey pot may not see comment spammers until Bot #1 scans it. But, after that, you will continuously get comment spammers from the Bot #2s.

Make sense?

We track both Type #1 and Type #2 bots. The first would get listed as suspicious for hitting a large number of honey pots in a short amount of time. The second would get listed as the actual comment spammers.

Matthew.
 
 Re: Comment Spammer catching?
Author: B.Plank2   (4 May 07 5:20pm)
It does. I see the Google and MSN spiders (or at least what they claim to be) going to the same pages/posts that receive the comment spam.



do not follow this link

Privacy Policy | Terms of Use | About Project Honey Pot | FAQ | Cloudflare Site Protection | Contact Us

Copyright © 2004–25, Unspam Technologies, Inc. All rights reserved.

contact | wiki | email