Looking back, I find it has been a little more than a month since I installed WP-Ban.
In that time, it has blocked 30,257 spam attempts. That’s 30,257 spam comments I haven’t had to delete.
Where are these coming from? I thought it might be interesting to post a Top Twenty list of IP addresses.
The percentage figures are based on the number of spam attempts coming from each IP address, as a percentage of the total spam attempts. So, for example, a little over 7% of the total spam attempts to my blog came from one IP address, 94.23.60.124, which is located in a block of IP addresses assigned to France (according to the Country IP Block database).
What conclusions can we draw from this? Blocking certain IP address ranges can be a big win if you don’t want to spend time mucking out Akismet. Specifically:
- 94.23.0.0 – 94.23.255.255
- 200.220.192.0 – 200.220.207.255
- 192.74.224.0 – 192.74.255.255
- 96.47.224.0 – 96.47.239.255
- 142.4.96.0 – 142.4.127.255
- 117.21.0.0 – 117.21.255.255
- 142.0.128.0 – 142.0.143.255
- 5.9.0.0 – 5.9.255.255
I am a little surprised at the number of spam attempts coming from IP addresses in the United States. My impression before I started using WP-Ban was that most of my spam was coming from China and countries in Latin America. My reading of the stats indicates that I do get a lot of spam from those sources, but larger percentages come from the United States and various countries in Europe (France, Germany, the United Kingdom, etc.)
For the record, I have yet to get any email from anyone in an IP range I’ve blocked requesting that I make an exception. I am happy to do so for any legitimate readers of my blog who are blocked: my email address is displayed on the page informing users they are banned.
Edited to add: Mike the Musicologist asked an interesting question: had I tried to associate the spam IP addresses with specific providers? The answer: no. I’ve gone back and attempted to add provider information based on what I’m finding at CQCounter.com.
However, I’m finding some issues between CIPB and CQCounter. For example, CIPB shows 142.0.133.89 as a United States IP block: CQCounter shows it as a Chinese block with Peg Tech as the ISP. I’d like to do some more work on this; if anyone has any suggestions, or especially if anyone has any information on Peg Tech, please feel free to leave it in the comments.