I got this via digest moments ago:
Date : 2005-02-10 14:39:13 Author : tramadol Email : carlahedrick@postmaster.co.uk URL : http://some tramadol-silling site IP : 67.19.91.50 Agent : Mozilla/3.0 (compatible; Indy Library) Post : Birthday Moved! URL : http://www.asymptomatic.net/archives/2003/11/28/354/birthday-moved/ Post ID: 354 Type : comment OSA :
OSA Code or time not in submission. Post commenting expired for this post 426 days ago. Too much spam from IP 67.19.91.50 in the last hour. Too much spam from email carlahedrick@postmaster.co.uk in the last hour. Final filter result: -10
Note the bold lines. I amuse myself with this feature. I’m thinking about having it tell me how many times they tried to spam me in the last hour. Maybe if it hits a certain threshold, I’ll just have it add their IP to the local blackhole list. That’s a good idea…
Oh, wait… There’s more!
Used HTTP_VIA header from IP: 213.29.0.162 Used verified open proxy at 213.29.0.162:8080. OSA Code or time not in submission. Spam match "online poker" found in field comment_author. Spam match "online-poker-click.com" found in field comment_author_url. Spam match "online-poker-click.com" found in field comment_domains. Post commenting expired for this post 150 days ago. Too much spam from IP 213.29.0.162 in the last hour. Final filter result: -10
Did I mention that OSA can detect open proxies? Cool, huh?
