Lately I posted some thoughts regarding blocking comment spam attempts on blog engines - Blocking Comment Spam Attempts. It is a problem since there is no single efficient technique right now to prevent POST attempts by blatant spammy robots. All techniques, except blocking by IP prevent the spam just to get into the database and that's it.
Something called Webaltbot is a blog spam robot that is able to POST via random IPs. GET requests come from the single original IP, so this way I was able to spot him (18.104.22.168). It uses the following user-agent string:
Mozilla/5.0 compatible WebaltBot/1.00 (i686-pc-linux)
Webaltbot is very blatant producing tens of POST attempts per minute. Take care...
Tuesday, December 26, 2006 9:21 PM