• Resolved deanljbirch

    (@deanljbirch)


    I love this plugin, however i have had 2 spammers get in within the space of one hour.

    User-Agent: Opera/9.80 (Windows NT 6.2; Win64; x64) Presto/2.12.388 Version/12.16

    IP Address : 212.129.38.30
    Reverse DNS : 212-129-38-30.rev.poneytelecom.eu
    Reverse DNS IP : 212.129.38.30
    Reverse DNS Authenticity : [Verified]
    Proxy Info : No Proxy
    Proxy Data : 212.129.38.30
    Proxy Status : FALSE
    HTTP_ACCEPT_LANGUAGE : en

    HTTP_ACCEPT: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/webp, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1

    IP Address Lookup: http://whatismyipaddress.com/ip/212.129.38.30

    Same info provided from both accounts.

    https://ww.wp.xz.cn/plugins/wp-spamshield/

Viewing 1 replies (of 1 total)
  • Plugin Contributor redsand

    (@redsand)

    Hi deanljbirch,

    I’m sorry to hear that. Thanks for providing that info. Spam shouldn’t get in from those servers. We’ve been tracking and blocking spam from those sources for a long time. Were you upgrading the plugin at the time the spam got in? WordPress will momentarily deactivate a plugin and reactivate it after the upgrade, and if the timing is right, a spam can get through because the plugin is not active for that short time.

    You can submit the full spam sample through the WP-SpamShield Support Page. Please provide as much info as you have.

    If you don’t mind, please turn on Blocked Comment Logging Mode with the option “Log All Comments” turned on as well. This will stay on for a max of 7 days and will log all comment, trackback, contact form and registration submissions. If you monitor that for the next few days we can see if there are any more attempts or ones that get through. The only cases I’ve seen of a spam getting through like that is when it’s rare timing during a plugin upgrade, or the plugin is deactivated. If that’s the case it won’t show up in the log. If one does show up in the log, you know the plugin was active. In that case the error codes and data from the log will reveal what the situation is and help me look into it. If you do need to submit log info, you’ll need to do it through the support page linked above, not here. (For your site’s security and privacy, it’s best not to post that info here.)

    – Scott

Viewing 1 replies (of 1 total)

The topic ‘SPAM got in’ is closed to new replies.