20,000 spam attempts per day (and counting)

The onslaught just keeps coming. It's on pace to easily meet 20,000 spam comments in 24 hours. I had a very small handful of false negatives, but they were easily dispatched by clicking a couple of checkboxes on an admin page.

20,000 spam attempts. Peaking at multiple attempts per second, with over 500 spam bots simultaneously spidering/spamming the site. Drupal seems to be holding its own, triggering throttles to shut down higher-load functions so the site remains responsive.

And Akismet is dutifully blocking the roaches from getting through. Their success rate just keeps dropping - down to 0.1% success rate, and even that is only temporary, until I manually remove the small handful that gets by Akismet's watchful gaze. The spammer's effective success rate is exactly 0% - not asymptotally approaching 0, but exactly 0. Zero. Absolute Zero. Cold heat death for spam.

I'm pretty sure they're sticking around here because the bots think they are succeeding - Drupal accepts the comment, so the bots think it worked. What they don't realize is that the comment is immediately unpublished by the Akismet module - as soon as the Akismet retuns its spam flag.

Thankfully, Dreamhost appears to be handling it like a champ. Not even breaking a sweat. I'm pretty sure that if this blog was still back on GoDaddy's servers, it would have curled up into the fetal position and mumbled quietly to itself...

See Also

comments powered by Disqus
Last updated: November 30, 2023