Title: TinyTimmy1's Replies | WordPress.org --- # TinyTimmy1 [ ](https://wordpress.org/support/users/tinytimmy1/) * [Profile](https://wordpress.org/support/users/tinytimmy1/) * [Topics Started](https://wordpress.org/support/users/tinytimmy1/topics/) * [Replies Created](https://wordpress.org/support/users/tinytimmy1/replies/) * [Reviews Written](https://wordpress.org/support/users/tinytimmy1/reviews/) * [Topics Replied To](https://wordpress.org/support/users/tinytimmy1/replied-to/) * [Engagements](https://wordpress.org/support/users/tinytimmy1/engagements/) * [Favorites](https://wordpress.org/support/users/tinytimmy1/favorites/) Search replies: ## Forum Replies Created Viewing 7 replies - 1 through 7 (of 7 total) * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Hosted WP Blog Subject to Spam Hacks like non-hosted](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/) * Thread Starter [TinyTimmy1](https://wordpress.org/support/users/tinytimmy1/) * (@tinytimmy1) * [14 years, 8 months ago](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/#post-2199616) * So I still have reg off, I installed & used BH. I have BB on with the stats plug in. I installed Saber and Stop Spammer Registration. Finally got through what I think are all the bad registrations. In the meantime, another 12 posts showed up in Pending. We will see if this fixes it. If not, then I can only assume there is a deeper flaw. * Is there a way I can double check no links were put into my posts that were already existing? * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Hosted WP Blog Subject to Spam Hacks like non-hosted](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/) * Thread Starter [TinyTimmy1](https://wordpress.org/support/users/tinytimmy1/) * (@tinytimmy1) * [14 years, 8 months ago](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/#post-2199612) * PS – I think the issue I am having with BB is really one of my own learning curve, not the app itself. BTW Using Ban Hammer and it ROCKS! There are probably 500 or so different domains that are obviously spammy, but some are duplicates. * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Hosted WP Blog Subject to Spam Hacks like non-hosted](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/) * Thread Starter [TinyTimmy1](https://wordpress.org/support/users/tinytimmy1/) * (@tinytimmy1) * [14 years, 8 months ago](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/#post-2199610) * Reg is turned off. BB was great help as far as insight, but hasn’t really accomplished much. The posts continue and I suspect new users are still registering, but changing the reg date somehow. I have a friend who does security who will be able to confirm this or not. what I would love to see is a plug in that lets you delete everybody through a certain time frame. That would have stopped this straight away. As it is, I spent all of yesterday and likely most of today just deleting posts and users. I have done about 1700 now, as far back as the 9th. A lot of the IP addresses appear to be varied with a few posts coming from the same IP, but user names are different usually (of course). Saber says it has blocked 155 attempts overnight, but sadly I awoke to another 10 posts. At this point, should I be worried that my core on the server is compromised? Thanks so much for all your help! * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Hosted WP Blog Subject to Spam Hacks like non-hosted](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/) * Thread Starter [TinyTimmy1](https://wordpress.org/support/users/tinytimmy1/) * (@tinytimmy1) * [14 years, 8 months ago](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/#post-2199475) * Who knew? I have a controversial cat!!! * I get a few trolls, and the regular IP look up I have been using from my desktop works okay, but isn’t infallible. I will check out the one you suggested. * So… I have deleted most of the new user names, but the “pending posts” are still happening, if but fewer and farther in between. So far I have made it back to the 15th and will keep going until I don’t see primarily names or domains that scream out SPAMMER. * Thanks for your help. It’s pretty scary in a way. Oh, I also change my passwords every few days, so that’s not how they got in. * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Hosted WP Blog Subject to Spam Hacks like non-hosted](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/) * Thread Starter [TinyTimmy1](https://wordpress.org/support/users/tinytimmy1/) * (@tinytimmy1) * [14 years, 8 months ago](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/#post-2199462) * Okay, so I installed Sabre so that the registration process is anti-bot and it seems to have staved the onslaught a bit. I also installed Register IP – MultiSite although I now realize that Sabre will also log the IPs in a different place. I am just throwing this out for anyone else who ends up having this issue. It isn’t a “real fix”, but so far it appears to be a good bandaide. * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Hosted WP Blog Subject to Spam Hacks like non-hosted](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/) * Thread Starter [TinyTimmy1](https://wordpress.org/support/users/tinytimmy1/) * (@tinytimmy1) * [14 years, 8 months ago](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/#post-2199451) * Okay – I did install the plug in and turned off registration but the posts keep coming in (18 since I did this) and the user registration is still happening. Is there somewhere else I should turn it off at? * Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/) In reply to: [Hosted WP Blog Subject to Spam Hacks like non-hosted](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/) * Thread Starter [TinyTimmy1](https://wordpress.org/support/users/tinytimmy1/) * (@tinytimmy1) * [14 years, 8 months ago](https://wordpress.org/support/topic/hosted-wp-blog-subject-to-spam-hacks-like-non-hosted/#post-2199447) * Thanks! I turned off registering required for commenting but failed to turn off“ anyone can register”. Is that what you meant? I turned it off now and am installing that plug in. *whew* That will cut down my deleting time A LOT! Thanks much. Any clue what security issue might be causing this? I deactivated any plug in I was not not actively using as well and updated all other active plug ins, yet it still continues. Viewing 7 replies - 1 through 7 (of 7 total)