We are continuously getting multiple spam search queries like this

大奖MG老虎机开户 Q82019309.com,

on my website. I don't understand what is this & how to stop this? Does anyone knows anything about it?


We're getting the same thing, currently looking into banning china/russia from our site as most malicious bots originate from there.

Edit: As a temporary measure, set "Maximum Query Length" to 15-20 depending on your catalog, its in System > Configuration > Catalog > Catalog > Catalog Search.

Edit#2: I resorted to IP Banning by GeoIP as shortening the query length didn't help. I chose https://www.mageworx.com/geo-lock-magento-extension.html - try blocking; China, Hong Kong, Taiwan, Singapore, Tibet.

Hope it helps

  • Tried it, but it still lets bots do the search, partial spammy link shows in admin panel... these bots crawl from dynamic IP's, tried banning range wise.
    – Icon
    Jan 9 '17 at 5:00
  • 1
    Edited the comment again, hope it helps Jan 9 '17 at 11:53

It's a known issue, basically spam search. Ignore. You really cant do much about it.

  • This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post. - From Review Jan 9 '17 at 4:36
  • Ignore is a solution. Just as other temporary methods: IP ban or Shorten Search query.
    – Icon
    Jan 9 '17 at 4:51
  • Ok Thanks, I try with shorten search query & let`s see what will be the result. Jan 9 '17 at 12:04

done some digging and identified its 360spider who is sending these spam searches - I found their user-agent in access_logs and they tend to search for q820... or www.qpyl etc

To block them (tested and works) - add the following to robots.txt

User-agent: 360Spider
Disallow: /

EDIT: I then noticed they spoofed the googlebot to perform the searches and I had to add the following to my robot.txt

User-agent: Googlebot
Disallow: /catalogsearch/
  • I'd be very careful about banning Googlebot via your robots.txt, this will literally cause Google to stop crawling the pages you disallow which will practically remove your store from Google searches. The odds are that if someone is spoofing to be the Googlebot, they won't care about your robots.txt either way. It's a text file, not some sort of web crawler cyber police.
    – TiEul
    Jan 30 '17 at 22:26

The same bot is hitting our website, and I am seeing the search terms in our admin. We are currently disallowing the /catalogsearch/ and /catalogsearch/result/ so that they are not crawled and indexed. We also went into Google Search Console to remove the indexed URLs from these spammy queries.

We had our developer block certain query strings that had identifiable spammy strings as shown in the following block:

RewriteEngine on
RewriteCond %{QUERY_STRING} Q82019309\.com$ [NC]
RewriteRule .* - [F,L]

This isn't a long term solution though, as you would have to continue to add new spam queries.

Also, here is a link to another thread that discusses this issue:


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.