I believe I have figured this spammer out. I correlated my Akismet spam entry with my raw access log and found out the spammer uses one ip address to GET and a second ip address to PUT. Akismet publishes the PUT ip address, which is constantly changing. I put the PUT ip address into wp-ban manager and of course, the spam kept coming. For some reason wp-ban also does not work when banning the site name.
Anyway, this spammer is using the ip address 195.154.250.39 to GET and a number of ip adresses, such as 107.172.171.56 and 107.172.198.171 to PUT. I have banned the GET ip address and hopefully this will work.
I’ve been getting hit by this spammer too, although on my WP site they’re hitting a feedback form on a static page. I blocked the IP address you listed and got immediate results. Now I guess we just wait to see if that’s their main spam pipeline or just a branch off of it.
(@torontoboy)
8 years, 2 months ago
For some reason for the last couple of months this site SeoOptimizedRankings.com is spamming me and I cannot ban it. I have added http://www.SeoOptimizedRankings.com and http://www.seooptimizedrankings.com/ to my host names, but WP-Ban does not seem to ban them. can you tell me what I’m doing wrong?
URL: http://www.SeoOptimizedRankings.com/
Message:
Akismet does catch it as spam but I’d like to ban it altogether. Any help would be appreciated.
https://wordpress.org/plugins/wp-ban/