Tag Info

Hot answers tagged

4

The answer is to not use a captcha, or use something in addition to it. Look to alternate methods such as hidden form fields that should never be filled in. Bots will most likely still fill them in, your validation will know immediately that it is a spammer. Another method would be the time based trigger. If a bot hits page then fills out a form, it will be ...


2

Yes. You have a problem. Explorebuncombe.com: Is an events site and does not appear to have a copy of your site but may have in the past- who knows. It is not related to the next two sites. Exploredare.com: Is a copy of your site without a frame or 301 redirect. The IP address is 50.56.48.239 which is on a Rackspace IP address block. Exploregastonia.com: ...


2

Yes you can. In fact, I recommend it and others too. I would not work so hard on my regular expression to include version numbers- just ^PHP.*$ You will find that some agent names are consistently up to no good even though some will argue that they can be used for good and should not be blocked. That is a negative argument. I study these things and I ...


2

PHP user agents are known as libraries. It should be no problem if you block them since legitimate crawlers use other string types, however, can't you check and block only the IP's? In this site, for example, you have ways to block only Chinese traffic.


2

There is basically only two options to do anything about it: Look up the management contact for the ip sending spam, (the whois utility can do it for you,) and send them an email and hopefully the spammer will be suspended. Block the IPs/IP ranges that is sending the spam from your contact form.


2

No. It is not Google. Google would not POST /xmlrpc.php. This may be a vulnerability probe or an attack against an existing vulnerability that may or may not exist on your site. 185.62.188.98 is hosted-by.blazingfast.io. When you see something like hosted-by as a sub-domain, it is a webhost, obviously, but also an anonymous address block where the server ...


1

Is there a simple way (not through command lines, ideally) to scan the website's files, or a list of the processes which are launched when one accesses the site, to troubleshoot where such malicious code snippet is located? I ran your site through webpagetest.org and the results are here: http://www.webpagetest.org/result/150721_YH_191X/1/details/ ...


1

Spammy looking visits are unlikely to be due to the code on your site. A lot of website are affected by this spam traffic, usually lasting less than 10 seconds with a bounce rate around 100%. These visits are often a traffic generation strategy to trick webmasters to look at the referral source for the visits, usually these redirect to some sort of ...


1

You are correct about betting being the issue. See Mailchimp knowledge base article on spam filters for a description of how spam filters work and what they look for. Can you remove the word betting from your daily emails and still make them understandable? That seems to be your only option.


1

Hmm do you see the paradox here? You are asking to shut down a site that scraped you under DMCA, yet you said they are allowed. I dont think you are going to get too far in the battle to shut them down. Here is the contents of your license that is [still] on the page footer as of Mar 13 2015: The person who associated a work with this deed has dedicated ...


1

Are there better solutions to this problem other than adding more human moderators? yes, automated annoyance of the spammers and their commercial objectives. First, make sure all past and future links on your site are "nofollow" see here for full details https://en.wikipedia.org/wiki/Nofollow but basically it makes your site far less attractive to ...


1

Your domain is not necessarily being accused of e-mail spam. Here are the categories from their FAQ: spam domain phish domain malware domain botnet C&C domain abused legit spam abused spammed redirector domain abused legit phish abused legit malware abused legit botnet C&C I would suggest checking your domain name and the IP address of your ...


1

I can agree that it definitely is NOT google at all. This webpage http://www.whois.com/whois/185.62.188.98 tells me its from a system out in ukraine called blazingfast. Before downright blocking the IP, you have to figure out what types of people you want to welcome to your site. It's quite possible that someone on that network simply has a hijacked ...


1

Either: Your attempt at adding captcha can be bypassed. The email address is known and the spam is not coming through the contact form. Its very hard to tell exactly what is wrong without a link to the site to investigate. I am the author of free open source contact form software that is designed to solve this very problem. My contact form: Never ...



Only top voted, non community-wiki answers of a minimum length are eligible