Site being attacked - solution needed

borgosh

Registered Member
Joined
Feb 10, 2013
Messages
54
Reaction score
21
Hi everybody,
In the past few weeks I noticed someone is attacking my site through my in-site search. They search with Chinese characters.
- the search result pages did not get indexed because they were tagged as no-index but they were using my crawl index. Changed many things to avoid this spam, but could not find a solution to block Google crawler in robots.txt (need advice on this one as well)

Second attack:
-just noticed that the amount of pages in my Not Found (404) has doubled in the search console in the last month.
- these results you can see on the screenshot have nothing to do with my actual content...and I'm afraid it has an effect on my site.

How are these generated? and how can I stop them? never saw anything similar. - these results are not coming from on-site searcher

siteblackhat.png
 
Is your site behind cloudflare? If yes then activate bot attack mode.

Many of these use automated bots so Cloudflare will block them.
 
I think they apply DDOS attack on your website. Simply change the host server or adding the new cloudflare DNS zone.
 
Are all of these pages search pages?
Blocking them with a wildcard in robots.txt would solve the problem as Google bots won't even be able to crawl these pages
 
Each page is unique and there is no DDOS...no additional request compared to "normal" in coudflare
 
Each page is unique, so will try the cloudflare solution
CF won't really solve the problem,
These pages are generated by generating search URLs of your website,
Then indexed using spam indexing,

No bots or users would be accessing your website most of the time,
All of the work is done off site, so your simple and easy solution is to block the search pages from being crawled,
I do get these blocked all the time while setting a new website
 

hideath could you please share a resource for wordrpess? I could not find any step by step method for it.​

Thank you for your help ;)
 

hideath could you please share a resource for wordrpess? I could not find any step by step method for it.​

Thank you for your help ;)
You just need to edit the robots.txt file and block search pages,
here's a simple code:

Code:
User-agent: *
Disallow: /?s=*
Disallow: /search/

Add this to the bottom of your robots.txt,
You might want to install Wordfence and make a scan as well,
Especially if you downloaded any nulled plugins/themes to your website or any website hosted in the same server,
Such attacks do usually come with a malware attack
 
‌‌‌‌The above Chinese text is an advertisement for some prostitutes.
 
‌‌‌‌The above Chinese text is an advertisement for some prostitutes.
My site started failing right in the same time these searches appeared...hopefully it will recover
 
Last edited:
Combat spam attacks by strengthening your site's security, implementing robust filters, and regularly monitoring and updating your robots.txt to block unwanted crawlers.
 
Why does it look like a hack? Bro, install wordfence and check for any modified files. This could be a hack on your website.
 
Back
Top