|
Author: S.Enbom (30 Mar 09 7:47am)
There's a huge stupid botnet trying to post spam on a site that i administer. 28.000 different IPs in about a month. Over 1000 spamposts a day. Quite a lot of IPs.
Most IPs I google seem "clean", are not in the PHP database or any other RBL. Right now Mollom is catching ALL spam, but it would be nice to get them caught in PHP too, but they dont visit the honeypot, just /comment/reply...
Spam example:
Spam: 2 <A HREF="http://www.expotv.com/profile/home/Cialis_Online_2jq">generic cialis soft</A> or <A HREF="http://www.expotv.com/profile/home/Xanax_Online_hq">codeine xanax</A> or <A HREF="http://detroit.metromix.com/user/profile/220517">tramadol alcohol</A> or <A HREF="http://www.expotv.com/profile/home/Phentermine_Online_11q">buy phentermine adipex-p online</A> or <A HREF="http://community.usatourist.com/members/cialis3ad.aspx">cialis free sample</A> or <A HREF="http://www.expotv.com/profile/home/Cialis_Online_2jq">cialis duration</A> or <A HREF="http://detroit.metromix.com/user/profile/220522">cialis drug cialis</A> or <A HREF="http://detroit.metromix.com/user/profile/220519">tramadol and asthma</A> or <A HREF="http://newyork.metromix.com/user/profile/220504">tramadol from india</A> or <A HREF="http://www.foreclosurepulse.com/members/viagra44d/default.aspx">generic viagra new au</A> or <A HREF="http://www.expotv.com/profile/home/Phentermine_Online_13q">phentermine to buy</A> or <A HREF="http://community.usatourist.com/mem
|
Welcome to Project Honey Pot | Login