Yes, I made an observation yesterday that WordPress does not have any kind of anti-flood measure in place. A visitor can sit on your blog all day and make thousands of comments on the same blog entry.
You can set it up so that the comments aren’t displayed until you approve them, but you’ll still have to go through and delete them all. I don’t understand the reason for this oversight, especially when the makers of WordPress acknowledge the abuses of SPAM. But it seems you’re on your own in this regard.
You may try and look for a plugin that will block IP Addresses, but you may find yourself spending most of your time adding new IP Addresses to the blacklist. You can also disable the comment feature rather than give in to extortion, but then that might defeat the purpose of your needing or wanting a blog-in-the-box.
