I'll try to describe this as best I can: it started on Wednesday when I began getting a ton of comment spam, all seemingly coming from different IP addresses. This was about one comment per minute. I installed the Spam module which I had looked into before and it only caught two spam messages before the comments stopped. Kind of surreal, like the bot was looking for the particular message the Spam module returns.

Fast forward to today, and the same pattern of use has been continuing on, just without the comment spam. At least once a minute for the last two days there's a page not found entry for a url pattern I've not seen before:

http://firsthour.net/node-in-question?q=node/1331

They're all pointing to the same clean URL node (the link above), but then append the non-clean url q=node/XXX, where XXX can be any number that apparently isn't a real node id.

I'm sure this isn't affecting my traffic tremendously, and I'm guessing this will stop eventually... but is there anything I can do to stop them? Like I said, it's pretty well distributed across a lot of IP addresses.

Comments

aspilicious’s picture

Install mollom. :) Its the best spam module drupal has and is way more effective than any other module I've seen.

Hi, I'm too precious to answer right now. Please email me later.

hansamurai’s picture

Thanks, not sure how I never even came across this in my quest to stop spam earlier this year.

I guess my current issue right now since the "spammers" (for lack of a better word, maybe bot) isn't even commenting anymore, is if there's anything to block IP addresses automatically from apparent bots that are just hitting the site randomly over and over?

MakeOnlineShop’s picture

Mollom deletes some comments classed as Spam without even allowing to check these comments before deleting them, and this module is often wrong but you will never know.