Why would they even accept a comment without a person giving his name?
Why isn't there a limit on the number of submissions from a single IP address? 255,000 from only four IPs?
Even after the fact, it should be trivial to strip and toss all the comments that were submitted without a name from these four IPs.
And then there's
this:
If this was done from properly distributed botnet, it might be hard to trace, but since there were only four IPs, it really shouldn't be...