New answers tagged

2

You are filtering on the wrong thing. You have the filter field set to Hostname. That will filter Google Analytics hits that claim to be recording statistics for that site. If you filter on the host name to prevent GA spam, you would usually exclude all host names that don't match the domain name for your site. According to this article and this Google ...


2

I think might be "hacked". xmlrpc is a common attacked used by hackers alike. I use Wordpress Expose from Chris G. Herbert to check if it can list username. I don't know the exact. But some people seems to be pointing to SEMRush which is an online digital marketing related. So they might still craw your website. Limit Login Attempts Reloaded might ...


6

Random unexpected URLs on your should be returning "404 Not Found" status. When so many weird URLs return "301 Permanent Redirect" instead, it is often a sign that your site has been hacked. Requests to wp-login and xmlrpc are common attack vectors for WordPress. If you are seeing tons of requests to those files, many of them are ...


4

I looked up the IP 185.191.171.42, and it seems to be owned by SEMRush. So the possible reason is that you have second-hand domain that the old owner created those pages and SEMRush still has the list of those pages. So SEMRush is trying to crawl those pages, maybe to see the backlink or other parts of the pages for SEO analytic. To confirm that you may ...


6

I can't claim to know all the motivations of spam bots, but the main motivation is creating links to help SEO. Most of the bots submitting this form don't even realize that it is a contact form. These bots submit every form they find trying to get their comments onto pages. The bots submit text that can get indexed in search engines. Then the spammer ...


Top 50 recent answers are included