SPAM - the other white meat
Here is an example of the other older kind of spam that I get a lot.
The following has been edited -- the letters that came in on the attempt were random and I have changed two or three of them in each URL to disallow searching.
Poster's name is entered as:
dbqrbyw
Comment is:
MQdMNr
rylgldmqlfze,
[url=http://wjtsxvjpneu.com/]wjtsxvjpneu[/url],
[link=http://tfkwpwrdyuez.com/]tfkwpmgpdwrdyuez[/link],
http://frlmwjbjssxi.com/
The structure doesn't change -- there is a four, five or six character header with unique capital and lowercase letters, a space and then a couple of URLs with gibberish characters.
I am suspecting that the controller tries to seed likely blogs with these, they then have the bots search for the seed posts and follow up with posts of their own.
And here is the regex that kills them dead:
/\b\d{6}\b/ End of story.
Like I said earlier, playing whack-a-mole with a bunch of mouth breathing script-kiddies...
Posted by DaveH at May 25, 2009 10:09 AM