~ryanlowe/blog: Blog Comment Spam

Blog Comment Spam

I'm having a bit of a problem with comment spam. Whoever is doing it is a real joker, that's for sure. The IP changes every time so I can't ban it. It looks like it's an automated script that switches names and uses a different common quote, but keeps the same site link. It's taking advantage of the fact that MovableType sites all look the same, so spamming comments is quite automatic.

It's also taking advantage of Google's PageRank system: the more links to the site they have, even in people's blog comments, the higher the rank of the site in Google. It's pretty slimy but not even close to illegal. PageRank is a blessing and a curse.

The trick, I think, is to make it not worth their while. I'll try to change the commenting just enough so that making a custom comment spammer just for this site wouldn't be worth their effort.

If that doesn't work I may have to upgrade to MovableType 3 beta and only allow registered commenters. I don't want to have to do that because I want to encourage feedback but I may have no other choice.

Posted at May 03, 2004 at 04:37 PM EST
Last updated May 03, 2004 at 04:37 PM EST

Comments

If they always link to the same site, you could make it so that if any commenter links to a known spam site, their comment is deleted / not allowed.

A link black list if you will...

Just don't put beernut on it. ;-)

» Posted by: Jim at May 3, 2004 04:45 PM

I thought about that, but MovableType doesn't allow it in the version I use. You can only block IP addresses. I'm not sure it's in version 3, but it would be an easy solution to that specific problem!

» Posted by: Ryan at May 3, 2004 05:00 PM

Can you toss a disclaimer page between the comment form and your blogging text?

(ie, click 'here' if you're an actual person etc..)

If its just a generic spam script as you're saying then that should put a stop to it..

On the other hand, if MovableType is so restricting that you can't do that, how about just making a front-end to the MovableType forms?.. (possibly applying some sort of wrapping/adapting-pattern-type-thing..) ;)

» Posted by: peter at May 3, 2004 07:02 PM

you can't get their ISP? If you do have it, complain to them.

» Posted by: roy at May 4, 2004 01:24 AM

I've had mixed results with Jay Allen's MT-Blacklist plugin. I have the same symptoms you do. I'm currently running MT3 Beta 1 and may switch over to TypeKey-registered commenters only once it goes gold.

Like you, I like to receive legitimate feedback from everyone. TypeKey might be a good compromise if it works, since one TypeKey registration should enable one to post to any MT blog that requires it.

» Posted by: aharden at May 4, 2004 11:41 AM

Another point I forgot. The URL redirection in MT 2.661 effectively kills the PageRank issue you mention; of course, the negative is that users can't see the destination URL.

» Posted by: aharden at May 4, 2004 11:58 AM

Thanks aharden. They might spam anyway though, unaware that it's ineffective. :(

» Posted by: Ryan at May 4, 2004 12:17 PM

I'm surprised that your lack of Post button where the message is typed doesn't stop it. Oh well, seems that my home made blogging stuff wins again. I would be able to add any functionality I wanted including blocking messages with certain links in them. Security through obscurity, I always say. ;)

» Posted by: Kibbee at May 4, 2004 06:29 PM