i give up
Today I tried changing the name of the comment script on my site, thinking that might at least slow the barrage of sp*m that took the whole server down this month.
Ha.
Within seconds of changing the script variable in the config file, I had my first new spam message.
I give up.
To comment on the site now, you will have to use a (free) TypeKey ID. Sorry. I hate to do that—nobody needs yet another hoop to jump through or password to remember. But I simply can’t spend any more time trying to safeguard the site. 
source: i give up
