A bunch of trackback spam from the stash

Running a blog means that the software is constantly under a barrage of exploit / spam attemps, as is the case with any webservice.

I have a few hooks and traps spread around to sniff out what’s coming in, especially in HTTP POSTs. So, without further ado the following items are from a trap that’s logging trackback spams:

12.145.174.203:
title => xptwzqbi
excerpt => xptwzqbi
url => h t t p://www.google .com/search?q=jgmspptg
blog_name => xptwzqbi

66.249.14.126:
title => Gourmands of the world, rejoice
excerpt => Peter Deilmann Cruises\’ 140-passenger MV Princesse de Provence will sail round trip from Lyon, France, on a nine-day wine-themed cruise-tour
url => h t t p://francecarrental. cacityla.net
blog_name => car rental lyon france

72.249.32.184:
title => Jack
url => h t t p://rv.partszonedirect .com
excerpt => Thanks for the info. By the way, I am a big fan of your site. Keep up the great work.
blog_name => Jack

209.59.201.225:
title => Britons held in India kidney
excerpt => Photograph: Manish Swarup/AP Indian police have confiscated the passports of two Britons who allegedly travelled to the country to buy
url => h t t p://cordless.dedayinn .net/cordless-miter-saw/
blog_name => cordless dewalt hand tool

74.54.176.50:
title => Jessie
url => h t t p://gr8spaces .com
excerpt => Love the blog and have added youtomydigg account
blog_name => Jessie

66.249.11.189:
title => Joye convicted of homicide by
excerpt => He also was living in the couple’s back bedroom at the time of the incident and was”the live-in nanny type”
url => h t t p://kidbedroom.armydads .net/kid-bedroom-rug/
blog_name => kid bedroom photo

124.217.231.53:
charset => UTF-7
title => +ADA-

124.217.231.53:
url => None
charset => UTF-7
excerpt => None
blog_name => Gen Drebery+ACc-,+ACc-deber@gmail.com+ACc-,+ACc-+ACc-,+ACc-63.2.12.45+ACc-,+ACc-2008-02-02 09:44:29+ACc-,+ACc-2008-02-02 09:44:29+ACc-,+ACc-+ACc-,+ACc-0+ACc-,+ACc-Internet Explorer+ACc-,+ACc-comment+ACc-,+ACc-0+ACc-,+ACc-0+ACc-),(+ACc-0+ACc-, +ACc-+ACc-, +ACc-+ACc-, +ACc-+ACc-, +ACc-+ACc-, +ACc-2008-02-03 09:44:29+ACc-, +ACc-2008-02-03 09:44:29+ACc-, +ACc-+ACc-, +ACc-spam+ACc-, +ACc-+ACc-, +ACc-comment+ACc-, +ACc-0+ACc-,+ACc-0+ACc- ) /*
title => None

124.217.231.53:
url => None
charset => UTF-7
excerpt => None
blog_name => +ACc-ILLEGAL
title => None

124.217.231.53:
url => None
charset => UTF-7
excerpt => None
blog_name => +ACc- AND 1=0) UNION SELECT 1 FROM wp_users WHERE user_login=+ACc-admin+ACc- /*
title => None

66.249.14.126:
title => Popular retailers finally embrace skull
excerpt => For the most part, skulls are sported by younger generations — teenagers to early 30s — but Loukakis says he\’s
url => h t t p://controltermite. firstcumhid.info
blog_name => control termite yolo

88.66.21.9:
title => qsxjrqmu
excerpt => qsxjrqmu
url => h t t p://www.google. com/search?q=ushktfwu
blog_name => qsxjrqmu

64.22.110.2:
title => Online Payday Loans
url => h t t p://www.idealpaydayloans .com
excerpt => National lender of online cash loan advances especially for online payday loan options.
blog_name => Online Payday Loans

66.249.11.209:
title => Community Platform: Ocean lifeguards deserve
excerpt => Should county ocean lifeguards (like county firefighters/paramedics/EMTs) be allowed to retire at age 55 (instead of age 62) or with
url => h t t p://interiordecorators .inccsssite.info/austin-decorators-interior/birmingham-decorators-interior.html
blog_name => Superior birmingham decorators interior

213.239.234.41:
title => best FastSize Extender price
url => h t t p://health.propeller .com/story/2008/01/18/fastsize-extender-device-for-men-special
excerpt => How Does The FastSize Extender System Work? The FastSize Extender uses traction to assist the body\’s natural ability to change and develop under physical influence.
blog_name => FastSize Extender Device For Men - Special

74.54.176.50:
title => Eric
url => h t t p://gr8spaces .com
excerpt => Love the blog and have added youtomydigg account
blog_name => Eric

74.54.176.50:
title => Jessie
url => h t t p://gr8spaces .com
excerpt => Love the blog and have added youtomydigg account
blog_name => Jessie

204.13.236.244:
title => ccqhthio
excerpt => ccqhthio
url => h t t p://www.google .com/search?q=bvefzmiq
blog_name => ccqhthio

74.54.176.50:
title => Jessie
url => h t t p://gr8spaces .com
excerpt => Love the blog and have added youtomydigg account
blog_name => Jessie

80.57.210.116:
title => Be Safe While Surfing
url => h t t p://www. safesurfingalley.info/
excerpt => Having the internet is a privilege and necessity for many people. It can be a very enjoyable pastime for all members of the family, but just as you lock your front door when you\’re not home and have insurance on your valuables, you need protection on your computer. It is inevitable that you will run into something on the internet that could cause your computer harm, and the worst part about it is that you may not even know. However, by putting a few simple measures in place you can protect your system and your family.
blog_name => Safe Surfing

87.123.107.17:
title => Distribution of Invoices via E-mail Reduces Collection Times and Improves Customer Service
url => h t t p://www. invoiceinsider.info/please-invoice/index.php
excerpt => The advantages of utilizing a modern print spooler and output management software solution
blog_name => Please Invoice

74.54.176.50:
title => Eric
url => h t t p://gr8spaces .com
excerpt => Love the blog and have added youtomydigg account
blog_name => Eric

74.86.155.65:
title => Ex-Employee Blows Whistle - WTVH
excerpt => WTVHEx-Employee Blows WhistleWTVH, NY -Jan 7, 2008The Syracuse-based computer repair company RescueCom is ripping-off its customers, according to an ex-employee. \”Anna,\” a
url => h t t p://heaterwall .audiocardisc.net
blog_name => cadet wall heater

67.228.129.181:
title => Program puts education, support first
excerpt => Program puts education, support firstStatesman Journal, OR -Jan 23, 2008As an Amity High School varsity softball player who had scouts ready to
url => h t t p://careertest .cadmvjob.info/career-key-test/
blog_name => amity career test

209.59.201.216:
title => Bankaholic Launches Certificate of Deposit
excerpt => In addition, an improved money market and high interest savings account engine is slated to launch late January, with a
url => h t t p://savingsrates .billcoxpay.info
blog_name => compare saving rate

As you can see most are just normal loan/investment/whatnot spam, but there are also a few SQL injection attempts. And yes, all the URLs were intentionally broken.

Comments are closed.

If you want to comment on this article please send e-mail
to authors(_at_)teamfurry.com or go to the forums.


InspectorWordpress has prevented 2 attacks.