urgent help ! receiving spam search and loosing resource

[mandi007]

my website is receiving spam search like " lRnMfciPgOnHEQDVjrr | pxFWckZhykKSf | BfvwJErOwEKoFGtgP | mmhqSMncHjktPeor | EeLwqrTfcnkuadZMQnl | PbPvYFZCwDKo | CFkHQuWuIUwTlTQdfN | pFjCCaikk | TlcxItekqfwr | ......"

continuously for whole day and sever is going offline..........how to stop this....i dont know this is know as ddos attack.

in cloud flare i enable the attack  protection for ddos...and this is eating my resource.....and causing load on sever.

please any ideas how to get rid of this unwanted searches in my website..

note: i found these keywords  using the latest search save option

[Aficionado]

Does your site domain start with "xoo" ?

[dev101]

Hi,

That type of spam search is really tricky to deal with in traditional way, because search queries are obviously random.
What IP addresses does it come from? You may block IP ranges in various ways, that's my first thought of defense.

[mandi007]

how to find the ips

[mandi007]

Does your site domain start with "xoo" ?

yes

[fre2mansur]

try stop saving the search queries in db.
in settings->latestsearches

[mandi007]

try stop saving the search queries in db.
in settings->latestsearches

if i stop also the spam search is going to continue in background right.....only difference is i will not be knowing this attack

[dev101]

Ask your hosting support about server logs. In cPanel they are under Metrics > RAW access, there you have both logs for ssl and non-ssl. Download, extract if compressed, and open with text editor. They should also be present in your home dir via FTP. If you run your own server, they are in var/log usually.

[Aficionado]

Maybe those are not attacks because i see the searches in your footer.

Also checking your site, it doesn't seem to work right, many problems. Scripts AFTER the </html> and ads not showing (
Sorry! but i can't find it, The page you are looking for was moved, removed, renamed or might never existed.).

[dev101]

@ Aficionado
Why is domain name relevant?

[Aficionado]

@ Aficionado
Why is domain name relevant?

because i found his domain searching on google, using those strange "searches". And i doubt this is a search problem.

[dev101]

Oh, I thought there was something else going on globally... thanks!

[dev101]

While, those stray scripts at the end are strange (theme issue or plugin old version), I don't think that's the problem.
Site search works, and someone/or some bot really performed those queries.

[mandi007]

Maybe those are not attacks because i see the searches in your footer.

Also checking your site, it doesn't seem to work right, many problems. Scripts AFTER the </html> and ads not showing (
Sorry! but i can't find it, The page you are looking for was moved, removed, renamed or might never existed.).

what <script is running after </html> i cant find anything....

the bottom i added the latest searched out to monitor whether the random words that are being searched in my website id stopped or not after enabling the cloudflare ddos protection...

"Sorry! but i can't find it, The page you are looking for was moved, removed, renamed or might never existed"

this i added instead of the

"There are no results matching "samsung mobile" "

[dev101]

Scripts from preResize plugin:

Code: [Select]

</html>
    <script src="http:// * /oc-content/plugins/preResize_images/js/pica/pica.min.js"></script>
    <script src="http:// * /oc-content/plugins/preResize_images/js/jquery.ui.touch-punch.min.js"></script>