Now it’s “Preteen”. I’ve gotten hit with ten comments so far. I’ve locked them out. They’ve spammed porn advertisements into my Christmas post, and my post about Tim Maroney’s death. This is vile and indecent.
Patrick, from the next room, just said they hit thirty-eight of his topic threads before he got them blocked.
Block them now: 18.104.22.168IMPORTANT ADDITIONAL INFO: adamsj says:
Since we’ve gotten attacks from multiple addresses in this range (I’ve had three different ones in the last day), block the whole range, thus, as the MT Support Forum notes:
209.210.176.That’ll get ‘em all, for now.
Make sure you include the period at the end of the address.The savvy Erik Olson has been trying to find a way to block this spammer’s range of IP addresses (22.214.171.124 - 126.96.36.199) without blocking unoffending addresses in the adjacent ranges. However, having now looked into MT’s source code, he says:
They [Movable Type] are just doing matching, not netmasking. … You have two choices.
1) Block 209.210.176. which blocks the whole 255, or2) Block 188.8.131.52, 184.108.40.206, all the way to 220.127.116.11, individually.
That is, if you don’t want to have to block unoffending addresses, you have to block 18.104.22.168, 22.214.171.124, 126.96.36.199, … 188.8.131.52, inclusive, as sixty-three separately blocked IP addresses.
Fast-breaking information is likely to show up in the comments following this post, so keep an eye on them.
UPDATES: Matt, over on Electrolite, reports that the guy is also using 184.108.40.206 , so block that one too.
Erik Olson has dug up a related Malaysian spammer: 220.127.116.11
Mary says this guy — no evident relation to the Lolita and Preteen spammer — has been posting ads for Viagra and hardcore in the comments of Pacific Views: 18.104.22.168
Movable Type’s authors discuss the issues, problems, and some possible answers to comment spam.
Joe Katzman’s Winds of Change has further suggestions on what needs to be done, and how to do it.