Gah Spam!

So I’ve been hit! And badly, too; the server has been responding at best intermittently this morning. Or perhaps someone else was hit; with 80 sites co-hosted on the same machine it’s hard to tell. But the barrage of Spaminator messages appearing at the same time as the site becomes inaccessible is a bit of a coincedence.

I’ll have a look-see at renaming wp-comments.php tonight. Any other suggestions for combating spam without chewing up resources to run it through WordPress and plugins and etc.?

For now, comments from “new” commenters will go into the moderation queue. If yours fails to appear right away, please be patient.

Comments

  1. yami wrote:

    … and testing, testing, blah blah blah.

  2. Harrison wrote:

    I’m sure you’ve already looked into this, but renaming the wp-comments file is not, I think, as easy a fix as it used to be, because of the template system, which depends on file name strings. (Of course, it’s all open source, so you can make the modifications that you need. But then you have the problem of keeping those changes though upgrades…)
    Sorry to hear that you’ve been hit so badly. Plugins like the Spam Stopgap might help somewhat — it forces a client-side javascript hash computation, and, I *think*, it tries to tie up the user’s connection if the check fails.

  3. yami wrote:

    Yeah, I think I’ll need to replace all those file name strings with a reference to some text file in the main directory. Then I can change the filename every week or so… since I need to customize all my themes anyway, it’s really not much extra work.
    Now that I’ve read my access logs, though, I’m pretty sure it wasn’t the spammers bringing me down. Maybe it was somebody else’s spamemrs. In any case, they were hitting wp-comments-post and wp-trackback directly, so it’s still worth the effort of renaming them.

  4. yami wrote:

    This is a test comment. I’m renaming the script as I type. Whee!

  5. yami wrote:

    And encore une fois!

Post a Comment

Your email is never published nor shared. Required fields are marked *

*

*