Blocking Spam with Wordpress

April 7, 2009

After my last article on Cleaning your Site after a Wordpress Injection Attack I figure that it’s time to take the old “an ounce of prevention us better than a pound of a cute” (or something like that). So here is a nice easy way to enhance your Akismet spam protection and quickly and easily blacklist an offending IP.

Personally I get really sick of blog spammers, especially since my blog is DoFollow. It doesn’t stand for the same thing as DoSpam. Very annoying time consuming and potentially harmful – alot of these same idiots who blog spam would also be the same people who will try to inject your Wordpress theme and plugins with Click Counter code.

Anyhow in this post I’m going to use the following plugins:

  1. Akismet (setup properly but that goes without saying.)
  2. WP-EasyBan
  3. WP Security Scan
  4. Secure Wordpress
  5. Redirection Plugin

The first thing you need to do is install all of the above plugins and ensure each of them work. As a side note: I had trouble with WP-EasyBan on Wordpress 2.7.1 but I corrected it. To be honest I am not 100% sure if it was a conflicting plugin issue or a core problem with WP-EasyBan. If you have a problem, contact me or comment here and I will share my fix (I wasn’t able to see “Add Ban” in the user menu but a few changes to the plugin fixed it without any issue).

Ok moving right along.

Let’s say you are getting a substantial amount of Spam in your Spam Bin in Akismet. You will easily be able to tell if it comes from one particular IP address. First go to your Spam Box and identify the IP address – see below:

One: Identfy the IP Address

Next step: Check your Security logs under “Tools -> Security Logs” – now if the person is simply annoying you can skip that step but the Security logs will identify if the user is on a blacklist:

Is the IP already on your Blacklist?

Check your Security Log and Blacklist

Once you’ve done that it’s time to “Add Ban” provided by WP-EasyBan. It’s got a great interface for you to add various options. We want to add a specific IP address (adding a block if IP’s could cause you to block legit visitors to your site.

Adding an entry to your Blacklist

Adding a Banned IP through WP-EasyBan

Also as an ounce of prevention you can set a time limit and maybe you’ll discourage the blog spammers after a period of time. The reason I like this method is that Spammers never give up unless they are certain that their stuff is not getting through. Blacklisting will let you send a message that there is no getting through to you.

As a last note: I like to add a personalized message to these idiots. Sometime I venture into more colourful language depending on how badly one IP is offending my site and messing with my hard work.

Then you can set another site to redirect them to as well. Get creative here you can have fun with this, there is also a sense of satisfaction to mess around with these people.

Anyone else have any tips? Let me know!

Cheers,

Dan Nedelko

Dan Nedelko

Related Posts
  • Wordpress Security Plugins When you use Wordpress for a corporate or business website, security always comes up as an issue and for good reason. In what has turned into an ongoing series on Wordpress Security I'm going to review a few very useful plugins which will add an additional layer of security to......
  • Online Casino PPC Strategy Given the popularity of the post: Online Casino PPC Allowed in the UK. I am going to be writing a 5 Part Series on developing a comprehensive PPC strategy that will ensure the following: Avoid the rampant and idiotic bidding wars which are bound to take place. Years ago the......
Related Websites

Comments

One Response to “Blocking Spam with Wordpress”

  1. Vote -1 Vote +1Wordpress Exploit Gumblar .cn by Dan Nedelko on May 15th, 2009 11:12 am

    [...] Blocking Spam with Wordpress [...]

Join in on the Discussion! Comment Now: