Forums

Tons of wp-trackback.php POST requests! Help! (6 posts)

  1. renata
    Member
    Posted 6 years ago #

    I keep receiving daily tons of POST requests from random IP addresses to wp-trackback.php. I believe this is the origin of my blank comment problem - http://wordpress.org/support/topic/42863
    The requests have no referrer and no content and also have random user-agents.

    Is there a way I can stop this? I need help, please.

    A sample of the last POSTs I received, as logged by apache:

    198.239.146.14 - - [22/Sep/2005:08:19:59 -0700] "POST /wp-trackback.php HTTP/1.1" 200 260 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.5b) Gecko/20030903 Firebird/0.6.1+"
    207.87.58.194 - - [22/Sep/2005:08:33:23 -0700] "POST /wp-trackback.php HTTP/1.1" 200 259 "-" "Mozilla/4.79 [en] (Win98; U)"
    200.177.112.145 - - [22/Sep/2005:08:34:21 -0700] "POST /wp-trackback.php HTTP/1.1" 200 261 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.1a) Gecko/20020611"

  2. Mark (podz)
    Support Maven
    Posted 6 years ago #

    Do you have Bad behavior installed ? If not, it may help:
    http://www.ioerror.us/software/bad-behavior/

  3. TheMarco
    Member
    Posted 6 years ago #

    Try my fresh anti-trackback spam plugin:

    http://www.i-marco.nl/wp/wordpress/

    Looking for testers anyway so please try it. It will certainly cure your problem.

  4. Mark (podz)
    Support Maven
    Posted 6 years ago #

    TheMarco - having looked at your plugin though, what it does not do is stop the request being made. It will certainly stop the spam, but the reason I indicated Bad Behavior was that it stops the spam at the door so reducing server load as well as the spam.

  5. TheMarco
    Member
    Posted 6 years ago #

    Server overhead is really minimal with my plugin. It's in the same league as bad-behavious which performs some checks as well! In fact it runs more code than my plugin does. When a trackback request comes in, the very first thing my script does is check whether the key is valid. If not it sends a blank response and no WP code is executed anymore. I'm pretty sure this doesn't really differ in CPU usage from bad behaviour. I think it's even lighter.

    Incidentally, I played around with bad behaviour and found that it lets plenty of spam through.

  6. error
    Member
    Posted 6 years ago #

    Bad Behavior lets a very small amount of spam through by design. This is because of my aversion to false positives. If you're seeing "plenty of spam," you probably forgot to activate the plugin. :)

    A site getting 500 spams a day without Bad Behavior should see fewer than 10 a day with Bad Behavior on average. And I'm still working on it.

Topic Closed

This topic has been closed to new replies.

About this Topic