spam posts on my blog, cannot find them in dashboard

  • hi all,
    saw in the blog stats that i got google links to spam posts (or pages) on my website. aah. i cannot find them via dashboard or myphpadmin, they are in a directory called /2011/88 – i have permalinks set to year/month, but 88 makes no sense.

    i cannot edit them, even if i am logged in, on the page i am showed logged off.

    example: https://explorish.net/2011/88/preppy-halloween-costumes/

    so annoying. haven’t found any solution here or elsewhere, everyone is talking about “comment spam” – this is different.

    i have the lastest version (problem started after upgrade), now installed all security plugins i could lay my hands on (except bad behavior, which won’t install), deleted admin user, talked to hosting, they recommended plugins etc, but i can’t get rid of those posts, and i have the impression new ones keep showing up.

    would greatly appreciate a helping idea!
    thank you in advance!

Viewing 8 replies - 1 through 8 (of 8 total)

  • Check the contents of your .htaccess file, as it could be doing a URL rewrite in there. To resolve, delete the line, NOT the file. Also, change the file permissions on this file, so it is not writable by everyone but your username.

    You may wish to update your WP Admin and FTP passwords as well. Just in case.

    Thread Starter explorish

    (@explorish)

    thank you harmck,
    checked htaccess, found nothing suspicious. not sure if safe to post here – has the usual stuff plus the long code from wp super cache which i initially thought it must be dodgy with all those phone brands listed, but apparently not. permission is 644.
    changed passwords (actually, deleted the admin user altogether). now i also changed ftp password.
    what puzzles me is that i cannot see those posts and get rid of them. any ideas greatly appreciated!

    I do not see any comments on the link you posted

    @govpatel – it has nothing to do with comments.

    The .htaccess shouldn’t contain anything too sensitive. But I understand your concern. You could add it to pastebin, put an expiry on it or you could sign up for pastebin, that way you can delete anything you post. I can take a quick look, and then you can just delete it.

    Thread Starter explorish

    (@explorish)

    @harmck – thank you! here is the htaccess: https://pastebin.com/ckkzqKwP

    @govpatel – the post itself has spam content, i didnt write it, cannot find and delete it, hosting guys say the url doesnt exist (!), but i still get hits from google which inflate my hit stats! i don’t get it…

    I am getting 404 now so you must got it sorted out

    Hi,

    Did you get this resolved? I didn’t see anything out of place in your .htaccess if you want to remove it.

    Also, if it is now resolved, what was the issue if you’ve found the solution?

    Thanks,
    Har

    Thread Starter explorish

    (@explorish)

    hi all,
    thank you for your help and for trying! the hosting guys said they found the spam pages hidden in a folder from another wordpress installation i hosted on my server – was an old version, which i haven’t used in a long time and forgot about.
    i can still see the hits in my stats, hope they will disappear once google crawls my site again… i hope.
    thanks for your support!
    cheers

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘spam posts on my blog, cannot find them in dashboard’ is closed to new replies.

Tags