The spam attack continues unabated. MT is pushing it all into moderation, which is good, but I don’t really ever want to see it. So it was time to start pulling IPs.
MT won’t give you a simple list view with IPS of all the junk comments, so I had to hit the sql. Here’s the query I used:
SELECT DISTINCT comment_ip FROM mt_comment WHERE comment_junk_status = -1
That should just give you the unique IPs of every message in your junk list. Make sure your junk list has no false positives before pulling the list. You’ll now have what is probably a list of open proxy servers like this one: 148.244.150.52 148.244.150.57 168.143.113.45 168.143.113.53 194.242.105.13 195.96.144.45 196.203.63.246 196.36.80.164 200.25.74.58 200.81.94.59 203.162.174.165 210.21.119.211 211.38.50.193 212.138.47.15 212.175.113.52 212.74.161.100 213.139.192.139 216.194.26.101 219.93.174.101 219.93.174.102 219.93.174.103 219.93.174.105 219.93.174.107 219.93.174.108 219.93.174.109 219.93.174.110 219.93.211.74 220.77.7.147 222.83.255.211 61.152.154.19 62.193.231.242 63.199.153.154 66.30.8.92 69.42.81.244 80.58.4.42 80.58.42.44 80.58.53.44 82.56.16.223 83.103.94.50
These are the proxies my current spamming bastard is using to hit my site every 10 minutes or so. I threw these into my firewall on the server. I’d like to add them to opm.blitzed.org, but the submission process is just too much of a pain in the ass. It would be nice to have a reporting tool built into MT that submits the comments and IPs.
At any rate, block those IPs. Nothing good can come from anonymous proxy traffic.