Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

This question already has an answer here:

Right from the day I installed WordPress on my site, I started getting spam comments/trackbacks. I have also prevented anonymous comments. I get the following email whenever a new spam is posted:

 New trackback on the post `"<post name>"` is waiting for your approval
`<url>`

Website : jackettl36 (IP: 112.111.173.89 , 112.111.173.89)
URL    : <redact>
Trackback excerpt:
<strong>fake OAKLEY sunglasses...</strong>

...

How to prevent such automated spam?

share|improve this question

migrated from superuser.com May 2 '13 at 15:36

This question came from our site for computer enthusiasts and power users.

marked as duplicate by paulmorriss, bybe, danlefree May 5 '13 at 5:20

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

    
Akismet and Captcha plugins!? –  Zistoloen May 2 '13 at 17:39

5 Answers 5

up vote 11 down vote accepted

I would recommend you to install and enable Akismet: http://wordpress.org/extend/plugins/akismet/

Akismet checks your comments against the Akismet web service to see if they look like spam or not and lets you review the spam it catches under your blog's "Comments" admin screen.

share|improve this answer
1  
+1 for Akismet! –  hvtuananh May 2 '13 at 15:48

I would recommend you to use a free captcha service like SweetCaptcha http://wordpress.org/extend/plugins/sweetcaptcha-revolutionary-free-captcha-service/

You can also use an external service to manage your comments like Disqus http://wordpress.org/extend/plugins/disqus-comment-system/

share|improve this answer
    
Those are both good options, but I would use them only after trying Akismet because both of those solutions may deter people from posting comments. –  nathangiesbrecht May 2 '13 at 18:41

I have good experiences with requiring people to first login before posting a comment. I would also recommend Akismet, but my company is for my own business and Akismet is only free for non-commercial use.

share|improve this answer
2  
Akismet for Business: $5/mo; akismet.com/signup –  BenjiWiebe May 2 '13 at 15:44

First off - it is near impossible to ensure 100% spam is never received on a public site that allows user submission, the best you can hope for is lowering it as much as you can.... Spam prevention is like a car alarm, it lowers the chances of becoming a victim.

There is hundreds of guides on the net but here's 5 solutions:, I personally just remove the footprints and wam! 99.9% gone.

Captcha

Using a Captcha service on your site can lower the amount of spam you receive but ultimately good spammers use de-captcha api service that costs as little as $0.01 per a decode.

Akismet

Akismet is a good service but sadly some slip though and sometimes even good messages can be flagged as spammy when they are not. I personally would use it, but it doesn't address the actual issue of how the spammers are finding you...

Removal of Footprints

This the most ignored factor and in my honest opinion the best way for a 'normal' site to avoid spam. Spammers don't have a magic list or scrape every site on the planet to find comment fields, they use search engines to find your comment fields. So you can put a stop to this by removing commonly used footprints.

Such as... footprints like:

"Leave a Comment"
"Leave a Response"
"Powered by WordPress"

By removing the above you can stop a lot of spammers finding your site, in order to understand what I'm talking about try this in Google:

Web Design + "leave a reply" + "Powered by WordPress" -"comments disabled"

This will report back Web Design sites, that have a comment box, is powered by wordpress, and does not have comments disabled. Spammers often use scapers such as scrapebox to find victims and they use digital footprints.

Renaming of fields

Automated software will often find named input fields, simply renaming these fields can help you confuse their bots.

For example:

<form action="comment">
  Name <input type="text" name="name">
  Email <input type="text" name="email">
  Site <input type="text" name="site"
  <input type="submit" value="Submit">
</form>

You could change this too:

 <form action="comment">
  Name <input type="text" name="SA8a">
  Email <input type="text" name="SasA">
  Site <input type="text" name="FeeA"
  <input type="submit" value="Das9">
</form>

As many automated software use standard things such as name="email" and so on.

Removing URL field, and putting URLs straight into spam box

Another simple method of preventing spam or least lowering it, is to remove the URL field from being accessible as well as throwing all comments with URLS in the text field into the spam box.

share|improve this answer

I have installed Akismet on my blog and the spam has dramatically reduced. I was getting 5+ spam comments a day now I have only had one this month. There are bots that just crawl around and post spam everywhere.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.