Comment bombing

I’ve been comment bombed today. 84 new comments.

The offender is one
200.108.238.107

And the linkspam is French.

Most of the spam is for sites at
membres.lycos.fr

User agents:
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8) Gecko/20051111 Firefox/1.5

The weird thing is that this one loads images and css files. It appears to be a real browser. And there’s this word appended to the URL’s on my blog sometimes: chuades. Eventually the browser (or whatever it is) stops asking for the images (most of the time) and goes straight into spamming mode. Hmm, two different browsers, two behaviors, one IP, one time period.

3 Responses to “Comment bombing”

  1. Matt Says:

    I’d be curious to hear your thoughts on Akismet.

  2. Administrator Says:

    I hadn’t heard of it. I tend to not block too much, so I have samples of spam… Would you enlighten us? You’ve got a widely read blog, so it’s not as though you need my soap box. But if you’d be interested in writing something about it, let me know.

  3. Russ Jones Says:

    My favorite spammer of the day. http://www.nonofollow.net

    They disguise themselves as bloggers opposed to Rel=Nofollow (although their argumentation is very weak). But, if you look at their code…

    http://www.nonofollow.net/index.php?title=Does_not_prevent_comment_spam&action=edit

Leave a Reply