{"id":1141,"date":"2020-12-29T22:37:44","date_gmt":"2020-12-29T22:37:44","guid":{"rendered":"http:\/\/tiemensfamily.com\/timoncs\/?p=1141"},"modified":"2020-12-30T19:55:42","modified_gmt":"2020-12-30T19:55:42","slug":"wordpress-comment-spam","status":"publish","type":"post","link":"https:\/\/tiemensfamily.com\/timoncs\/2020\/12\/29\/wordpress-comment-spam\/","title":{"rendered":"WordPress Comment Spam"},"content":{"rendered":"\n

A quick note on WordPress spam in comments – Starting 2020 November 26th and continuing until 2020 December 17th, a spammer created a bunch of comments on the one page that had accidentally allowed comments – “About”<\/p>\n\n\n\n

In total, there were 33,389 spam comments created. This was caused by (1) migrating this blog from the previous (amateurish<\/a>) hosting company, and (2) WordPress creating one post by default with “Comments” still active. It was easy enough to stop new comments (edit Post, Discussion, uncheck “Allow Comments”). To remove 33,389 comments, I used the plugin “Delete All Comments of wordpress<\/a>” by Navneet Soni.<\/p>\n\n\n\n

All of the comments had IP addresses from a very small block (5.188.211.x):<\/p>\n\n\n\n

5.188.211.10, count=2997\n5.188.211.13, count=3346\n5.188.211.14, count=3004\n5.188.211.15, count=2975\n5.188.211.16, count=2985\n5.188.211.21, count=3326\n5.188.211.22, count=3007\n5.188.211.24, count=3070\n5.188.211.26, count=2990\n5.188.211.35, count=3074\n5.188.211.72, count=2615\n<\/code><\/pre>\n\n\n\n
Whois result:<\/p>\n\n\n\n
% Information related to '5.188.211.0 - 5.188.211.255'\n\n% Abuse contact for '5.188.211.0 - 5.188.211.255' is 'abuse@pindc.ru'\n\ninetnum:        5.188.211.0 - 5.188.211.255\nnetname:        inf-net\ncountry:        RU\nadmin-c:        MK19775-RIPE\ntech-c:         MK19775-RIPE\nstatus:         ASSIGNED PA\nmnt-by:         MNT-PINSUPPORT\ncreated:        2017-04-13T10:32:21Z\nlast-modified:  2017-04-13T10:32:21Z\nsource:         RIPE\n\nperson:         Makary Kwiatkowski\naddress:        ul. Zachodnia 20\naddress:        Bialystok 15-345\nphone:          +48695689091\nnic-hdl:        MK19775-RIPE\nmnt-by:         MNT-PINSUPPORT\ncreated:        2016-10-26T21:03:01Z\nlast-modified:  2016-10-26T21:14:53Z\nsource:         RIPE # Filtered\n\n% Information related to '5.188.211.0\/24AS34665'\n \nroute:          5.188.211.0\/24\ndescr:          PIN DC\norigin:         AS34665\nmnt-by:         MNT-PIN\nmnt-by:         MNT-PINSUPPORT\ncreated:        2019-11-11T07:41:06Z\nlast-modified:  2019-11-11T07:41:06Z\nsource:         RIPE\n\n<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
A quick note on WordPress spam in comments – Starting 2020 November 26th and continuing until 2020 December 17th, a spammer created a bunch of comments on the one page that had accidentally allowed comments – “About” In total, there … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/tiemensfamily.com\/timoncs\/wp-json\/wp\/v2\/posts\/1141"}],"collection":[{"href":"https:\/\/tiemensfamily.com\/timoncs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tiemensfamily.com\/timoncs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tiemensfamily.com\/timoncs\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tiemensfamily.com\/timoncs\/wp-json\/wp\/v2\/comments?post=1141"}],"version-history":[{"count":2,"href":"https:\/\/tiemensfamily.com\/timoncs\/wp-json\/wp\/v2\/posts\/1141\/revisions"}],"predecessor-version":[{"id":1145,"href":"https:\/\/tiemensfamily.com\/timoncs\/wp-json\/wp\/v2\/posts\/1141\/revisions\/1145"}],"wp:attachment":[{"href":"https:\/\/tiemensfamily.com\/timoncs\/wp-json\/wp\/v2\/media?parent=1141"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tiemensfamily.com\/timoncs\/wp-json\/wp\/v2\/categories?post=1141"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tiemensfamily.com\/timoncs\/wp-json\/wp\/v2\/tags?post=1141"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}