Spammers / Hackers Finding the Community
I'm curious about what are they searching to find a new community in a new domain, I have the first one in a new installation that was never promoted with a domain that has it's first installation, before was just a redirection.
Also here some weird messages (SC)
I disabled the possibility to register in the community now in my site.
The process to add someone to space in FCRM will automatically register for the community right?
Thanks
Carlos RoderaΒ there are a lot of ways how to spam WP in general. To mitigate Spam you can disable the Register New Users option in WP-Admin and only allow users who purchase the access in your store (access even for $0).
Also if you are using CloudFlare you can specify some WAF rules for accessing your Community url (ex: /portal).
Bots can scan variety of WP public resources like site maps, robots.txt, rss/feeds and in case you have a PUBLIC Community bots can scan also some common urls, google index etc.
The easiest manual way to discover your community is just type your domain name + community or all feeds word in the Google search bar (use filter for the last 30 days) - already you can find some big communities (one even publish all 10k+ /Members list).
all feeds wpmanageninja.com
or
community all feed inurl:/com.portal
In addition you are probably publishing list of all your plugins (not mentioning your WP authors = WP users) so you should consider what will be the best approach in you case.
Ps. Without some type of automatic and manual moderation it will be hard to manage a Public community - it might become a place for SPAM and link building.
btw: It is possible to SPAM via web hooks/macros if the spammer has already logged in user session - for chat SPAM is much easier if there is no rate limit implemented / captcha / etc for "very active users".
Mat βΒ thanks! yeah I disabled the login option.
I don't really get this:
"In addition you are probably publishing list of all your plugins (not mentioning your WP authors = WP users) so you should consider what will be the best approach in you case."
Mine will be a private paid so it will be easier to manage, I never had an issue with buddyboss, never had no one registering to the site.
I guess disabling the possibility will avoid anyone register, I hope, as I said I have BB for 4 years and it never happened.
Carlos RoderaΒ read your chat in 5 sec
Carlos RoderaΒ check your Chat message from me since it is hard to spot all Direct/Private Messages
I am Vietnamese.
Seeing you comment that you bought 100 licenses, I admire you for buying so I texted you to congratulate you and test the texting feature! I'm very sorry for texting in Vietnamese and you didn't understand.
LΓͺ ViαΊΏt HợpΒ Thanks! No problem, was clearly a language misunderstanding π and yeah all in with this amazing software!
Carlos RoderaΒ Yes! Let's make the community better together!
π
ππ€£
I am going to implement something to stop these spammers!