Link spam on my MediaWiki-based Brede Wiki from multiple hosts

Posted on Updated on

I presently experience link spamming from coordinated multiple hosts on my MediaWiki-based Brede Wiki.  Given the speed of the editing it is probably a bot. It probably solves the simple math Captcha, apparently also email confirm now and finally edit text with link spam on the user page once it is confirmed. Here is an example with the user ‘KrisJqv’. Note the many different URLs that are involved.

 1 193.235.43.47 - - [27/May/2013:14:29:47 +0200] 
"GET /wiki/User:KrisJqv HTTP/1.0" 404 4117
2 193.235.43.214 - - [27/May/2013:14:29:47 +0200]
"GET /w/index.php?title=User:KrisJqv&acti
3 194.103.2.140 - - [27/May/2013:14:29:48 +0200]
"GET /w/index.php?title=Special%3ASearch&s
4 193.234.166.46 - - [27/May/2013:14:52:47 +0200]
"GET /wiki/User:KrisJqv HTTP/1.0" 404 415
5 193.234.166.205 - - [27/May/2013:14:52:48 +0200]
"GET /w/index.php?title=User:KrisJqv&act
6 193.235.43.148 - - [27/May/2013:14:52:48 +0200]
"POST /w/index.php?title=User:KrisJqv&act
7 194.103.2.134 - - [27/May/2013:14:52:49 +0200]
"GET /wiki/User:KrisJqv HTTP/1.0" 200 4518
8 46.227.68.118 - - [27/May/2013:14:52:50 +0200]
"GET /wiki/User:KrisJqv HTTP/1.0" 200 4255
9 82.145.44.26 - - [27/May/2013:16:00:35 +0200]
"GET /wiki/User:KrisJqv HTTP/1.1" 404 12451
10 82.145.44.26 - - [27/May/2013:16:00:37 +0200]
"GET /wiki/User:KrisJqv HTTP/1.1" 404 12451
Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s