“Over the past two weeks, five hosts have in some way disabled MT or MT comments because of the server load they were creating,” writes MT blogger Reid Stott. “Not five little Mom & Pop hosts – at least three of them Iโd consider serious to top-notch hosts.” Other bloggers also reported web hosts disabling MT scripts. One said their host, XO Communications, disabled MT after seeing 100 active connections to mt-comments.cgi, suspecting a denial of service attack was underway.
In shared hosting, dozens and even hundreds of sites can share the same web server, meaning that overactive scripts on a single site can impact many other customers. As a result, hosts will disable resource-hogging scripts, usually by changing their permissions so they can’t be executed. Repeated problems can prompt a hosting company to ban a script or application from its servers. Movable Type users fear continuing comment spam problems could prompt such a “death sentence” from more hosts.
Six Apart, which also operates the TypePad blog hosting service, says it is working with web hosts on a resolution. “We have learned a lot from running TypePad, and we’re working on a way to share that information out with the hosting community at large,” says Anil Dash of Six Apart.
While they await a fix, some bloggers are collecting tips and strategies to help reduce comment spam and server load. Six Apart says it is determined to fix the software, and develop broader solutions to the comment spam problem. “There is no higher priority to us than making sure that our customers and their websites are protected from the effects of these malicious attacks,” said Allen.