Are you using Akismet? It keep nearly 100% of the comment spam from appearing on my blog. I setup WordPress to turn off comments on posts that are older than 90 days.