Spam Error Logs

  • Hi,

    I see the following error logs:

    [Fri Jan 22 18:48:06.421260 2021] [proxy_fcgi:error] [pid 3788:tid 139875843651328] [client 3.236.222.45:57778] AH01071: Got error 'PHP message: Error Illegal mix of collations (utf8_general_ci,IMPLICIT) and (utf8mb4_unicode_520_ci,COERCIBLE) for operation 'like' de la base de datos de WordPress para la consulta SELECT SQL_CALC_FOUND_ROWS ar3_2_posts.ID FROM ar3_2_posts WHERE 1=1 AND (((ar3_2_posts.post_title LIKE '%\xf0\x9f\xa4\x9b\xf0\x9f\xa7\xbe\xe2\x9a\xbd www.LloydsPharmacy.xyz \xe2\x9a\xbd\xf0\x9f\xa7\xbe\xf0\x9f\xa4\x9b viagra f\xc3\xb6r kvinnor receptfritt k\xc3\xb6pa viagra utan recept apotek online cialis%') OR (ar3_2_posts.post_excerpt LIKE '%\xf0\x9f\xa4\x9b\xf0\x9f\xa7\xbe\xe2\x9a\xbd www.LloydsPharmacy.xyz \xe2\x9a\xbd\xf0\x9f\xa7\xbe\xf0\x9f\xa4\x9b viagra f\xc3\xb6r kvinnor receptfritt k\xc3\xb6pa viagra utan recept apotek online cialis%') OR (ar3_2_posts.post_content LIKE '%\xf0\x9f\xa4\x9b\xf0\x9f\xa7\xbe\xe2\x9a\xbd www.LloydsPharmacy.xyz \xe2\x9a\xbd\xf0\x9f\xa7\xbe\xf0\x9f\xa4\x9b viagra f\xc3\xb6r kvinnor receptfritt k\xc3\xb6pa viagra utan recept apotek online cialis%'))) AND (ar3_2_posts.post_password = '') AND ar3_2_posts.post_type IN ('post', 'page', 'attachment') AND (ar3_2_posts.post_status = 'publish') ORDER BY (CASE WHEN ar3_2_posts.post_title LIKE '%\xf0\x9f\xa4\x9b\xf0\x9f\xa7\xbe\xe2\x9a\xbd www.LloydsPharmacy.xyz \xe2\x9a\xbd\xf0\x9f\xa7\xbe\xf0\x9f\xa4\x9b viagra f\xc3\xb6r kvinnor rece...'

    How can I fix this?
    According to Malcare the site is clean.

    Any thorts?

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Thread Starter Irene

    (@arlinaite)

    I see a lort of searches for the following: Why?

    185.191.171.41 - - [22/Jan/2021:18:48:06 +0000] "GET /es/?s=%F0%9F%A4%9B%F0%9F%A7%BE%E2%9A%BD%2 0www.LloydsPharmacy.xyz%20%E2%9A%BD%F0%9F%A7%BE%F0%9F%A4%9B%20viagra%20f%C3%B6r%20kvinnor%20rec eptfritt%20k%C3%B6pa%20viagra%20utan%20recept%20apotek%20online%20cialis HTTP/1.1" 200 12482 "- " "Mozilla/5.0 (compatible; SemrushBot/7~bl; +https://www.semrush.com/bot.html) X-Middleton/1"
185.191.171.38 - - [22/Jan/2021:18:21:05 +0000] "GET /es/?s=%F0%9F%90%8B%F0%9F%8D%99%E2%9E%AE%2 0www.LloydsPharmacy.xyz%20%E2%9E%AE%F0%9F%8D%99%F0%9F%90%8B%20where%20can%20i%20buy%20viagra%20 online%20bra%20online%20apoteket HTTP/1.1" 200 12439 "-" "Mozilla/5.0 (compatible; SemrushBot/7 ~bl; +https://www.semrush.com/bot.html) X-Middleton/1"
216.244.66.241 - - [22/Jan/2021:17:51:08 +0000] "GET /es/?s=%20Viagra%20online%20italia%20forum %20Prezzi%20viagra%20cialis%20levitra%E2%9E%9B%E2%A0%A3%F0%9F%A7%AF%20www.UkMeds.online%20%F0%9 F%A7%AF%E2%A0%A3%E2%9E%9B%20Uqnto%20costa%20il%20cialis%20in%20farmacia%20Costo%20viagra%20in%2 0farmacia%202020%20Viagra%20on%20line%20low%20cost%20Buy%20viagra%20cialis%20online%20uk HTTP/1 .1" 403 840 "-" "Mozilla/5.0 (compatible; DotBot/1.1; https://www.opensiteexplorer.org/dotbot, h [email protected]) X-Middleton/1"
    • This reply was modified 4 years, 1 month ago by Irene.
    Moderator t-p

    (@t-p)

    Install the plugin Wordfence plugin and do full scan of your site.

    You may want to implement some (if not all) of the recommended security measures and start backing up your site.

    Thread Starter Irene

    (@arlinaite)

    Thanks for your answer:

    1) I do manual backups of files and database plus Cloudways backup and restore.
    2) I have Cloudflare firewall rules for login and sensitive files protection and bots blocking.
    3) Also I enabled Under Attack, and Bot Fight
    4) I used to have WordFence and Cloudways support told me that makes site slower. However I think that I will load it again because it has rate limiting that I think is useful and I don’t know how to set this up in Cloudflare.
    5) Today I cleaned the database from 800 flamingo spam records, just in case.

    I don’t think is a lack of protection.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Spam Error Logs’ is closed to new replies.