In the past 3 days I’ve had over 1100 comment spam denials. When you consider that since I last reset MT-Blacklist in August, I’ve had a total of around 2800 denials, you get some idea of just how badly the server has been hammered over the past few days.
By browsing the database and sorting its output, I’ve been able to get a list of the strings which generate the most hits. These are:
- pictures-movies.org (651)
- pics-videos.net (580)
- pictures-and-videos.com (461)
- onlineshop.us.com (236)
- greatnow.com (59)
There are also a number of regular expressions and URL patterns which generate many more denials.
It would appear that the first three are related – although their WHOIS data is different they all point to web sites in the same IP range.