I just downloaded 1.1.3 and installed it on my WordPress 1.2.2 site. I had 1.1.2 installed previously, and it worked great until 2 or 3 days ago, when I started getting 3 or 4 spam comments a day (hey! it’s better than 90 or 100! I’m still impressed! Love this app!).

With 1.1.3, after only a few hours, I have 2 more, and they’re a little different than the old ones: funky diamond characters in the name area and a url in bold type “zz51.51.net.”

Here’s the line from my raw access log from one of the posts he spammed:
222.183.140.132 – - [01/Jul/2005:19:20:56 -0700] “GET /index.php?p=25 HTTP/1.0″ 200 19790 “-” “Mozilla/3.0 (compatible)”

The IP matches what WP reports — this time (I was getting a lot of spoofed IPs before). Comment moderation is ON, as usual; I currently only have Tar Pit running concurrently with BB. (I know! — I should be using WP1.5x with BB and Gatekeeper and/or SpamAssasin — but I’m moving to a Darwin-enabled server in another month or so to handle QTVR, and I’ll upgrade to WP 1.5x then.)

Is this guy a newbie, or did he find a way to slip between the cracks?

Thanks for the great piece of software!

Peace,

Will Kessel
will@collisionbend.com
http://www.collisionbend.com

Cleveland, Ohio