Tag Info

Hot answers tagged

4

The answer is to not use a captcha, or use something in addition to it. Look to alternate methods such as hidden form fields that should never be filled in. Bots will most likely still fill them in, your validation will know immediately that it is a spammer. Another method would be the time based trigger. If a bot hits page then fills out a form, it will be ...


2

Yes. You have a problem. Explorebuncombe.com: Is an events site and does not appear to have a copy of your site but may have in the past- who knows. It is not related to the next two sites. Exploredare.com: Is a copy of your site without a frame or 301 redirect. The IP address is 50.56.48.239 which is on a Rackspace IP address block. Exploregastonia.com: ...


2

Yes you can. In fact, I recommend it and others too. I would not work so hard on my regular expression to include version numbers- just ^PHP.*$ You will find that some agent names are consistently up to no good even though some will argue that they can be used for good and should not be blocked. That is a negative argument. I study these things and I ...


2

PHP user agents are known as libraries. It should be no problem if you block them since legitimate crawlers use other string types, however, can't you check and block only the IP's? In this site, for example, you have ways to block only Chinese traffic.


2

There is basically only two options to do anything about it: Look up the management contact for the ip sending spam, (the whois utility can do it for you,) and send them an email and hopefully the spammer will be suspended. Block the IPs/IP ranges that is sending the spam from your contact form.


2

No. It is not Google. Google would not POST /xmlrpc.php. This may be a vulnerability probe or an attack against an existing vulnerability that may or may not exist on your site. 185.62.188.98 is hosted-by.blazingfast.io. When you see something like hosted-by as a sub-domain, it is a webhost, obviously, but also an anonymous address block where the server ...


1

Are there better solutions to this problem other than adding more human moderators? yes, automated annoyance of the spammers and their commercial objectives. First, make sure all past and future links on your site are "nofollow" see here for full details https://en.wikipedia.org/wiki/Nofollow but basically it makes your site far less attractive to ...


1

I can agree that it definitely is NOT google at all. This webpage http://www.whois.com/whois/185.62.188.98 tells me its from a system out in ukraine called blazingfast. Before downright blocking the IP, you have to figure out what types of people you want to welcome to your site. It's quite possible that someone on that network simply has a hijacked ...


1

You are correct about betting being the issue. See Mailchimp knowledge base article on spam filters for a description of how spam filters work and what they look for. Can you remove the word betting from your daily emails and still make them understandable? That seems to be your only option.


1

Hmm do you see the paradox here? You are asking to shut down a site that scraped you under DMCA, yet you said they are allowed. I dont think you are going to get too far in the battle to shut them down. Here is the contents of your license that is [still] on the page footer as of Mar 13 2015: The person who associated a work with this deed has dedicated ...


1

Either: Your attempt at adding captcha can be bypassed. The email address is known and the spam is not coming through the contact form. Its very hard to tell exactly what is wrong without a link to the site to investigate. I am the author of free open source contact form software that is designed to solve this very problem. My contact form: Never ...


1

To delete all the spam pages, instead install extension DeleteBatch. Edit a script file from Special:AllPages of all the page names you want deleted. Load this into Special:DeleteBatch. Use PHPmyAdmin to mass delete the unwanted users.


1

There is not enough information for anyone to really know what is going on here. But here is what you may be missing. Any system has several services installed along with applications; FTP, HTTP, SSH, DNS, and PHP and Java are fairly common. You will have more. Each service and application can be vulnerable. PHP and Java are environments/languages that can ...



Only top voted, non community-wiki answers of a minimum length are eligible