Anatomy of a comment spammer
by Volker Weber
This spambot would have dumped 1000 spam comments a day into the site. As you can see, it is not checking results at all. It just keeps on hitting the site. Since it is changing its IP address over and over again, the spammer is using a botnet. All bots use the same open proxy.
Next line of defense: Deny all open proxies.