« Friday at Father Flannagan's | Main | Simple Tiramisu »


Thursday, April 21, 2005

Comment and Trackback Spam Attempts

Seems like a comment and trackback spam run is starting. Interestingly, it seems to have started with a particular IP (66.227.14.106 aka virusfree.safemail.com from Grapevine, Texas) doing a search first of all the pages on this site at 21/Apr/2005:00:03:29 +0800 with the following user agent: "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.2b) Gecko/20020923 Phoenix/0.1"

Then immediately after, I get a whole string of attempted comment and trackback spam from the following IPs:

66.227.14.106 - - [21/Apr/2005:00:03:30 +0800] "POST /cgi-bin/mt/mt-tb.cgi HTTP/1.0" 404 289 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0rc3) Gecko/20020523"

24.232.93.18 - - [21/Apr/2005:00:03:33 +0800] "POST /cgi-bin/mt/mt-comments.cgi HTTP/1.1" 404 295 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.0.3705)"

138.251.203.109 - - [21/Apr/2005:00:03:48 +0800] "POST /cgi-bin/mt/mt-tb.cgi HTTP/1.1" 404 301 "-" "Mozilla/4.5 [de] (Macintosh; I; PPC)"

64.62.148.170 - - [21/Apr/2005:00:03:53 +0800] "POST /cgi-bin/mt/mt-comments.cgi HTTP/1.1" 404 295 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 95)"

64.62.148.170 - - [21/Apr/2005:00:03:54 +0800] "POST /cgi-bin/mt/mt-tb.cgi HTTP/1.1" 404 301 "-" "Mozilla/5.0 (Windows 98; U) Opera 6.01 [en]"

66.207.162.42 - - [21/Apr/2005:00:04:06 +0800] "POST /cgi-bin/mt/mt-comments.cgi HTTP/1.1" 404 295 "-" "Mozilla/4.0 (compatible; MSIE 5.0; Windows 98) Opera 6.01 [es]"

64.62.148.170 - - [21/Apr/2005:00:04:07 +0800] "POST /cgi-bin/mt/mt-tb.cgi HTTP/1.1" 404 301 "-" "Mozilla/4.79 [en] (Windows NT 5.0; U)"

134.159.124.202 - - [21/Apr/2005:00:04:08 +0800] "POST /cgi-bin/mt/mt-comments.cgi HTTP/1.0" 404 295 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.2b) Gecko/20020929 Phoenix/0.2"

134.159.124.202 - - [21/Apr/2005:00:04:11 +0800] "POST /cgi-bin/mt/mt-tb.cgi HTTP/1.0" 404 289 "-" "Mozilla/4.0 (compatible; MSIE 4.0; Windows 95)"

63.230.150.242 - - [21/Apr/2005:00:04:12 +0800] "POST /cgi-bin/mt/mt-comments.cgi HTTP/1.0" 404 295 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.1) Gecko/20020826"

195.128.164.98 - - [21/Apr/2005:00:04:22 +0800] "POST /cgi-bin/mt/mt-tb.cgi HTTP/1.0" 404 289 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.1a) Gecko/20020611"

198.65.102.84 - - [21/Apr/2005:00:04:31 +0800] "POST /cgi-bin/mt/mt-comments.cgi HTTP/1.1" 404 295 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)"

198.65.102.84 - - [21/Apr/2005:00:04:32 +0800] "POST /cgi-bin/mt/mt-tb.cgi HTTP/1.1" 404 301 "-" "Mozilla/5.0 (Windows; U; Win98; de-DE; rv:0.9.4) Gecko/20011019 Netscape6/6.2"

129.206.55.247 - - [21/Apr/2005:00:04:34 +0800] "POST /cgi-bin/mt/mt-comments.cgi HTTP/1.1" 404 307 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:0.9.7) Gecko/20011221"

66.207.162.42 - - [21/Apr/2005:00:04:40 +0800] "POST /cgi-bin/mt/mt-tb.cgi HTTP/1.1" 404 289 "-" "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0; DT)"

24.232.93.18 - - [21/Apr/2005:00:04:43 +0800] "POST /cgi-bin/mt/mt-comments.cgi HTTP/1.1" 404 307 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.2b) Gecko/20020929 Phoenix/0.2"

24.232.93.18 - - [21/Apr/2005:00:04:48 +0800] "POST /cgi-bin/mt/mt-tb.cgi HTTP/1.1" 404 301 "-" "Mozilla/4.76 (Windows 98; U) Opera 5.11 [de]"

66.227.14.106 - - [21/Apr/2005:00:04:49 +0800] "POST /cgi-bin/mt/mt-comments.cgi HTTP/1.0" 404 295 "-" "Mozilla/4.72 (Windows 98;US) Opera 4.0 Beta 3 [en]"

24.232.93.18 - - [21/Apr/2005:00:04:50 +0800] "POST /cgi-bin/mt/mt-tb.cgi HTTP/1.1" 404 301 "-" "Opera/7.0 (Windows 2000; U) [en]"

195.128.164.98 - - [21/Apr/2005:00:04:55 +0800] "POST /cgi-bin/mt/mt-comments.cgi HTTP/1.0" 404 295 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; T-Online Internatinal AG; Q312461)"


Archives



Powered by
Movable Type 3.35