• Hi,

    My website has been under an internal site search spam attack for a few months now.

    In Google Webmaster Tools, I can see tons of /?s= queries indexed.

    Screenshot -> https://imgsh.net/a/mHRIQLe.jpg

    I already have the search results page set to Noindex, but I want to disable search result page to block the bots that are causing this spam.

    I am using Google seach in my website so i dont need to used search function from Wordrpess

    Could you tell me what should i do?

    Thank you.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Hi,

    you could block the ip that is doing these searches by searching for these requests in the access log or you could deactivate the search plugin that you are using.

    Thread Starter seotaro

    (@seotaro)

    Hi, @benniledl

    I was wondering if you could be a little more specific?

    I’m using NGINX and have access logs enabled to record visitors, but I can’t figure out which IPs are generating that spam.

    All I could see was that the bots were following the indexed spam links.

    185.191.171.8 - - [23/May/2023:00:06:29 +0900] "GET /?s=%EC%98%A8%EB%9D%BC%EC%9D%B8%20%EA%B2%BD%EB%A7%88%20%EC%8B%9C%ED%96%89%20Ak48.top%20%EA%B2%BD%EB%A7%88%EB%86%80%EC%9D%B4%ED%84%B0%20%EC%9D%BC%EB%B3%B8%EA%B2%BD%EB%A7%88%EC%82%AC%EC%9D%B4%ED%8A%B8%20%EA%B2%BD%EB%A7%88%EC%82%AC%EC%9D%B4%ED%8A%B8%20qoz HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +https://www.semrush.com/bot.html)"
    185.191.171.9 - - [23/May/2023:00:06:34 +0900] "GET /?s=%EA%B2%80%EC%A6%9D%20%EC%B9%B4%EC%A7%80%EB%85%B8%20DK22.TOP%20%EC%BD%94%EB%93%9C6520%20%EB%B0%94%EC%B9%B4%EB%9D%BC%20%ED%94%84%EB%A1%9C%EA%B7%B8%EB%9E%A8%20%EB%8B%A4%EC%9A%B4%20%EB%B8%94%EB%9E%99%EC%9E%AD%20%EC%B9%B4%EC%A7%80%EB%85%B8%20%EC%97%90%EB%B3%BC%EB%A3%A8%EC%85%98%EA%B2%8C%EC%9E%84%20%EC%9D%B8%ED%94%BC%EB%8B%88%ED%8B%B0%EB%B8%94%EB%9E%99%EC%9E%AD%20ozo HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +https://www.semrush.com/bot.html)"
    185.191.171.4 - - [23/May/2023:00:06:40 +0900] "GET /?s=%EC%9D%B8%ED%84%B0%EB%84%B7%EA%B2%BD%EB%A7%88%EC%82%AC%EC%9D%B4%ED%8A%B8%20CM1533.COM%20%EA%B2%BD%EC%A3%BC%EB%A7%88%20%EB%8B%89%EC%8A%A4%EA%B3%A0%20%EA%B2%BD%EB%A7%88%EC%86%8C%EC%8B%9D%20%EC%9D%BC%EB%B3%B8%EA%B2%BD%EB%A7%88%20%EC%8B%A4%EC%8B%9C%EA%B0%84%20qB HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +https://www.semrush.com/bot.html)"

    Thank you.

    Hi, I’m not sure where the semrush bot gets those urls from.

    When decoded, it represents the following text:

    “??? ?? ?? Ak48.top ????? ??????? ????? qoz”

    It appears to be a Korean text string with the words “??? ?? ??” (Online Horse Racing), “Ak48.top” (which might be a website), “?????” (Horse Racing Playground), “???????” (Japanese Horse Racing Site), “?????” (Horse Racing Site), and “qoz” (which I don’t know what means).

    I am thinking maybe your site is infected, could you please open files like wp-config.php and wp-blog-header.php and look for the text eval or for some human unreadable text (disguised malware)

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘How to disable search result page?’ is closed to new replies.