Is my site hacked or did I miss out on some permissions?

On Dec 12 something with usernames like "roulette", " casino online", "online gambling" etc pit some harmless(?) comments for each topic in my wordpress module. I changed the permissions for the module when I came to know that.

Today, the moment I posted a blog, a comment automatically appeared for the blog.

Is my site hacked?

Here is some more info about the bot(?)

Author : online gambling (IP: 195.194.158.17 , 195.194.158.17)
E-mail : qqidoim@aa290b3a250660906695abec7f942fc11.com
URI : http://www.free-casino-games-000.com
Whois : http://ws.arin.net/cgi-bin/whois.pl?queryinput=195.194.158.17

I got the above info from the utomated e-mail I received when the comment got posted


Below is the info from my logs - most of the IPs are from Amsterdam. I removed my website name(put xxx instead):

213.16.96.6 - - [12/Dec/2004:10:39:45 -0500] "GET /modules/wordpress/index.php?p=20 HTTP/1.1" 200 21653 http://www.xxx.com "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)" "-"
80.97.219.77 - - [12/Dec/2004:10:44:53 -0500] "POST /modules/wordpress/wp-comments-post.php? HTTP/1.1" 302 5 http://www.xxx.com "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)" "-"
80.97.219.77 - - [12/Dec/2004:10:44:56 -0500] "GET /modules/wordpress/index.php?p=21 HTTP/1.1" 200 22192 http://www.xxx.com "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)" "-"
194.47.95.115 - - [12/Dec/2004:10:49:52 -0500] "POST /modules/wordpress/wp-comments-post.php? HTTP/1.1" 302 5 http://www.xxx.com "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Win 9x 4.90)" "-"
194.47.95.115 - - [12/Dec/2004:10:49:54 -0500] "GET

Don't worrky about hack - I suppose, some new bot was born in this day, 12 Dec - because I saw in my blog comments added by "strange" user (I have allowed anonymous posting) about same shit
Added with interval 1 min between submits, rather long text... no additional problems (except "deny comments") detected at host

What about the fact that when I posted another blog yesterday, another comment got created automatically even though comment_moderation has been set to manual?

I posted another entry and the comment re-appeared. I removed the comment BUT when I tried to put comment out there, it gave message that the comment form as not available (I had diable comment mechanism a few days back)

I deleted all his entries from the comments table... he had some 80-90 entries ot there.


But he is still tring to post comments . How do I ban him and allow others? He regulary changes his IP. All I know is his username pattern.

is he using a similar email domain? @whatever.com?

i presume he's joining the site to post? goto admin, preferences and enter his email domain into the section that says email addresses not allowed..