This is the second comment spam I’ve seen on my site(s). When WordPress emails me about a new comment, the new spam looks like this:
Author : Gen Drebery+ACc-,+ACc-deber@gmail.com+ACc-,+ACc-+ACc-,+ACc-63.2.12.45+ACc-,+ACc-2008-01-25 23:21:20+ACc-,+ACc-2008-01-25 23:21:20+ACc-,+ACc-+ACc-,+ACc-0+ACc-,+ACc-Internet Explorer+ACc-,+ACc-comment+ACc-,+ACc-0+ACc-,+ACc-0+ACc-),(+ACc-0+ACc-, +ACc-+ACc-, (IP: 69.31.80.66 , colo-69-31-80-66.pilosoft.com)
A thread on WordPress’s support site reports the following gets injected into their comment table:
Gen Drebery’,’deber@gmail.com’,â€,’63.2.12.45′,’2008-01-24 23:06:25′,’2008-01-24 23:06:25′,â€,’0′,’Internet Explorer’,’comment’,’0′,’0′),(’0′, â€, â€, â€, â€, ‘2008-01-25 23:06:25′, ‘2008-01-25 23:06:25′, â€, ’spam’, â€, ‘comment’, ‘0′,’0′ ) /*
It seems that whatever is getting spammed doesn’t actually make it into the database, but y’all might want to check your sites out closely, just in case.