My trackback spam problem

Freshness Warning
This blog post is over 16 years old. It's possible that the information you read below isn't current and the links no longer work.

More than half the traffic to my site is Trackback spam — but not of the variety you’d expect. I’m not talking about people trying to ping me, I’m talking about Simpletracks, my standalone trackback tool. Simpletracks lets you ping anyone even if your blogging tool doesn’t support trackback.

The problem is that for the last 6 weeks, spammers are hammering it, and hard. Now they aren’t smart spammers. All but a handful of the spam traffic comes from a small group of IP addresses. So those are blocked. Other evidence that these guys aren’t very bright is that it’s probably harder to submit to my form than it is just to send the trackbacks directly and skip the middle man.

I’ve added some countermeasures to Simpletracks. I aggressively ban people that hit the tool too often. I have a form key that changes every few minutes, requiring that you actually load the form before submitting it. There’s a few other tricks as well. But the bots are as dumb as the spammers, they’re already been set to run, and the fact that they aren’t getting through does nothing to deter them. They keep hammering my server.

October 27, 2005 9:58 AM

If the spamware is using trackback the same way most blogging software does, it is scanning the html page for the hidden "rdf:RDF" block("trackback:ping="), and using that info to send the trackback. As long as your plugin alters the RDF block to reflect the new trackback URL, the spammer will have no trouble sending the trackback.

This discussion has been closed.

Recently Written

The Trap of The Sales-Led Product (Dec 10)
It’s not a winning way to build a product company.
The Hidden Cost of Custom Customer Features (Dec 7)
One-off features will cost you more than you think and make your customers unhappy.
Domain expertise in Product Management (Nov 16)
When you're hiring software product managers, hire for product management skills. Looking for domain experts will reduce the pool of people you can hire and might just be worse for your product.
Strategy Means Saying No (Oct 27)
An oft-overlooked aspect of strategy is to define what you are not doing. There are lots of adjacent problems you can attack. Strategy means defining which ones you will ignore.
Understanding vision, strategy, and execution (Oct 24)
Vision is what you're trying to do. Strategy is broad strokes on how you'll get there. Execution is the tasks you complete to complete the strategy.
How to advance your Product Market Fit KPI (Oct 21)
Finding the gaps in your product that will unlock the next round of growth.
Developer Relations as Developer Success (Oct 19)
Outreach, marketing, and developer evangelism are a part of Developer Relations. But the companies that are most successful with developers spend most of their time on something else.
Developer Experience Principle 6: Easy to Maintain (Oct 17)
Keeping your product Easy to Maintain will improve the lives of your team and your customers. It will help keep your docs up to date. Your SDKs and APIs will be released in sync. Your tooling and overall experience will shine.


What I'm Reading


Adam Kalsey

+1 916 600 2497


Public Key

© 1999-2022 Adam Kalsey.