Proxy needs banning
I just got a comment spam on annelisabeth.com. From the Bulgarians (they seem to be having intermittent blacklist troubles).
This one sailed past the filters that would normally have stopped the posting attempts.
The reason is the high anonymity of the proxy
IP number:
62.193.231.243
proxy3.checkflow.net
Update: It now resolves to:
wpc1213.amenworld.com
You should also block:
62.193.231.242
wpc1213.amenworld.com
I’ll check if there are more proxies on this net.
It doesn’t leav a pinappleproxy identifier. I found this instead:
It’s a for sale software suite that enables you to surf invisibly. I don’t know if the Bulgarians use that on one of their machines, or if they’ve found a way to misuse a proxy server.
Either way, ban the IP number, until we find a way to cut the Bulgarians off.
Update
This proxy swallows the referrer. The Bulgarians have used it some, and the net result is always that their spam doesn’t enter the logs (only the access does). This also means if you block commenting that doesn’t have a referrer from your site, this proxy is blocked. Thought this would be relevant…
Done. I checked my log for today and found that IP in four places, so into my htaccess he goes.
Spampop does such a good job I grow lazy and let it do most of the work.
Eternal vigilance is the cost of MT.
This particular IP number should stay banned forever. It’s sole purpose is to afford people a way to be anonymous on the web.
I don’t want anonymous people on my blog. I want their real IP numbers in my blog, though I don’t mind if they try to be anonymous in other respects. As long as their behavior is OK, it’s not a problem. But too many people use anonymizers for pranks.
I’ve experienced a really persistent troll in another setting. Trying to figure him out is one of the reasons I’m good at spam hunting. I’m using the exact same skills, though for different reasons.