{"id":166,"date":"2004-10-26T21:30:49","date_gmt":"2004-10-26T19:30:49","guid":{"rendered":"http:\/\/volker-schering.de\/weblog\/?p=166"},"modified":"2004-10-26T21:49:17","modified_gmt":"2004-10-26T19:49:17","slug":"kommentarspam","status":"publish","type":"post","link":"https:\/\/volker-schering.de\/weblog\/2004\/10\/26\/kommentarspam\/","title":{"rendered":"Kommentarspam"},"content":{"rendered":"<p>Hatte heute hier im Weblog ungef?hr 70 Kommentare zu verschiedenen Eintr?gen, vorallem ?ltere Eintr?ge waren betroffen. Bei allen Kommentare ging es um irgendwelche Onlinelotto-Geschichten \ud83d\ude41<\/p>\n<p>Die IP ?ber die der Kommentarspam verschickt wurde: <strong>195.193.5.101<\/strong><\/p>\n<p>Nachdem ich alle Kommentare wieder gel?scht hatte habe ich mal ein <em>traceroute<\/em> und <em>whois<\/em> auf die IP losgelassen. Allerdings sind die Ergebnisse wenig aussagekr?ftig. Besitzer der IP ist ein niederl?ndischer ISP.<\/p>\n<p><!--more--><br \/>\n<code>traceroute 195.193.5.101<\/code><\/p>\n<blockquote><p>\n 1  192.168.0.254 (192.168.0.254)  1.247 ms  0.903 ms  0.867 ms<br \/>\n 2  217.5.98.165 (217.5.98.165)  82.581 ms  169.749 ms  207.578 ms<br \/>\n 3  217.237.157.30 (217.237.157.30)  175.682 ms  26.810 ms  179.650 ms<br \/>\n 4  217.239.37.114 (217.239.37.114)  39.144 ms  161.548 ms  39.296 ms<br \/>\n 5  62.156.139.186 (62.156.139.186)  176.993 ms  39.307 ms  161.391 ms<br \/>\n 6  so-0-2-0.TR1.PAR2.ALTER.NET (146.188.8.117)  38.679 ms  80.875 ms  39.325 ms<br \/>\n 7  so-1-0-0.TR1.AMS2.ALTER.NET (146.188.3.105)  199.239 ms  198.696 ms  245.529 ms<br \/>\n 8  so-5-0-0.XR2.AMS6.ALTER.NET (146.188.8.85)  177.002 ms  178.797 ms  209.853 ms<br \/>\n 9  so-7-0-0.CR2.AMS9.ALTER.NET (212.136.185.106)  67.596 ms  196.575 ms  240.510 ms<br \/>\n10  POS10-0-0.GW5.AMS9.ALTER.NET (212.136.177.42)  75.887 ms  158.478 ms  55.007 ms<br \/>\n11  mre101.prvlimburg.nl (195.193.5.249)  207.801 ms  216.817 ms  193.260 ms<br \/>\n12  *\n<\/p><\/blockquote>\n<p><code>whois 195.193.5.101<\/code><\/p>\n<blockquote><p>\n% This is the RIPE Whois secondary server.<br \/>\n% The objects are in RPSL format.<br \/>\n%<br \/>\n% Rights restricted by copyright.<br \/>\n% See http:\/\/www.ripe.net\/db\/copyright.html<\/p>\n<p>inetnum:      195.193.5.0 &#8211; 195.193.5.255<br \/>\nnetname:      PRVLIMBURG<br \/>\ndescr:        prvlimburg.nl<br \/>\ncountry:      NL<br \/>\nadmin-c:      PS6380-RIPE<br \/>\ntech-c:       PS6380-RIPE<br \/>\nstatus:       ASSIGNED PA<br \/>\nmnt-by:       NLNET-MNT<br \/>\nmnt-lower:    NLNET-MNT<br \/>\nchanged:      giyon@NL.uu.net 19990908<br \/>\nsource:       RIPE<\/p>\n<p>route:        195.193.0.0\/16<br \/>\ndescr:        NLnet Pseudo blocks<br \/>\norigin:       AS702<br \/>\nmember-of:    RS-UUNETNL<br \/>\nremarks:      &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\nremarks:      E-mail is the preferred contact method!<br \/>\nremarks:      &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\nremarks:      Please use one of the following addresses:<br \/>\nremarks:      abuse@nl.uu.net   &#8211; for abuse notification<br \/>\nremarks:      support@nl.uu.net &#8211; for technical questions<br \/>\nremarks:      info@nl.uu.net    &#8211; for anything else<br \/>\nremarks:      &#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;-<br \/>\nnotify:       ripe-guardian@NL.UU.NET<br \/>\nmnt-by:       AS1890-MNT<br \/>\nchanged:      marcel@eu.uu.net 20010205<br \/>\nsource:       RIPE<\/p>\n<p>person:       P Smits<br \/>\naddress:      Provincie Limburg<br \/>\naddress:      Postbus 5700<br \/>\naddress:      NL-6202 MA  MAASTRICHT<br \/>\naddress:      The Netherlands<br \/>\nphone:        +31 43 3897790<br \/>\nnic-hdl:      PS6380-RIPE<br \/>\nchanged:      giyon@NL.uu.net 19990908<br \/>\nsource:       RIPE\n<\/p><\/blockquote>\n<p>Kommentare werden ab jetzt von mir moderiert, zumindest solange bis ich eine andere L?sung f?r das Problem &#8222;Kommentarspamming&#8220; gefunden habe.<\/p>\n<p>Schade&#8230;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hatte heute hier im Weblog ungef?hr 70 Kommentare zu verschiedenen Eintr?gen, vorallem ?ltere Eintr?ge waren betroffen. Bei allen Kommentare ging<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wikipediapreview_detectlinks":true,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-166","post","type-post","status-publish","format-standard","hentry","category-allgemein"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/posts\/166","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/comments?post=166"}],"version-history":[{"count":0,"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/posts\/166\/revisions"}],"wp:attachment":[{"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/media?parent=166"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/categories?post=166"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/volker-schering.de\/weblog\/wp-json\/wp\/v2\/tags?post=166"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}