Category: CleanTalk

  • Our Client’s Review: WP Guru

    Our Client’s Review: WP Guru

    We love sharing feedback from our users — and today’s story comes from Robin from WP Guru.

    CleanTalk has been a lifesaver for my client’s website on countless occasions. As someone managing SEO-driven lead generation sites and WooCommerce stores, having a reliable solution to combat spam has been an essential part of the development process.

    CleanTalk has not only helped me block spam comments and leads, but it has also been instrumental in preventing bots from creating fake orders. This has saved both me and my clients a significant amount of time and hassle.

    We’d like to thank Robin and WP Guru for trusting CleanTalk to protect their projects and sharing their experience with the community.

  • Apology for Duplicate Security Report Emails on October 2

    Apology for Duplicate Security Report Emails on October 2

    On October 2, a technical error caused our system to send duplicate copies of the Security Report email to some users of our Security Service for Websites.


    In a few cases, the same report was sent multiple times.

    3668 Security Issues Have Been Blocked
    3668 Security Issues Have Been Blocked

    We identified and fixed the issue within a few hours, but unfortunately, the duplicate emails had already been delivered.

    We sincerely apologize for this inconvenience and appreciate your understanding.


    Our team has implemented additional safeguards to ensure this does not happen again.

    — CleanTalk Team

  • New: WordPress Password Leak Protection in CleanTalk Plugin

    New: WordPress Password Leak Protection in CleanTalk Plugin

    Leaked passwords are one of the fastest-growing threats to WordPress. WordPress password leak protection helps block attackers who reuse stolen credentials from massive breaches.Security by CleanTalk now gives you a way to stop them before they log in.

    What’s New: WordPress Password Leak Protection

    Password Leak Protection automatically checks user credentials against public breach databases. If a password is exposed, login is denied and the user is forced to reset it on the next attempt.

    Update your plugin and turn it on in General Settings.

    66
    Password Leak column in the Users table with clear statuses6

    User experience

    When a password is flagged as leaked, the next login takes the user to a compact reset form right on the login page. They enter the current password, choose a new one, confirm it, and can sign in again immediately. The leaked status is cleared after a successful change.

    77
    Dashboard banner shown when a user’s password has been leaked

    Administrator View: WordPress Password Leak Protection

    Administrators can monitor security directly inside WordPress, and WordPress password leak protection adds another layer of defense. The Users table now shows a Password Leak column with three possible statuses: Not verified, Safe, or Leaked. If the system finds compromised accounts, the dashboard shows a warning banner.. For additional control, administrators can run manual checks from the Users section, and results update instantly through AJAX. Background tasks run automatically in batches, ensuring that large sites are processed without extra load.

    How to enable

    By default, the system keeps the feature disabled. To turn it on:

    1.Go to Authentication → General Settings.

    2.Enable “Checking the user’s password for information leaks.”

    3.Select which roles to cover. By default, the system includes Administrators and Editors..

    4. Run a one-time scan in Users to get an instant baseline for current accounts.

    88
    Settings panel for enabling password leak checks and selecting roles

    Why It Matters: WordPress Password Leak Protection

    According to OWASP, exposed credentials are among the most dangerous security risks for web applications. Even strong passwords become unsafe once they appear in leak databases. Password Leak Protection reduces this risk by stopping logins with compromised passwords and requiring users to reset them before continuing.

    Next steps

    Update your CleanTalk Security Plugin to the latest version.
    Enable Password Leak Protection in Authentication → General Settings, choose the roles to cover, and run a one-time scan in Users to check current accounts.

    This ensures that compromised passwords are blocked and users must reset them before logging in again.

    If you want to strengthen your defenses further, combine Password Leak Protection with CleanTalk Anti-Spam to stop bot registrations and spam comments, and with Uptime Monitoring (ссылка) to keep track of your site’s availability around the clock.

    FAQ

    Which roles are checked by default?
    By default, Password Leak Protection applies to Administrators and Editors. You can extend coverage to other roles in Authentication → General Settings.

    Does Password Leak Protection send email alerts?
    No. Notifications appear in the WordPress dashboard as a banner and as statuses in the Users table. There are no email alerts for leaked passwords.

    If a password leaks, the system blocks the login. On the next attempt, it redirects the user to a reset form on the login page. After the user confirms a new password, the system marks their account as safe again..

    How does this feature work with Brute Force Protection and 2FA?
    Password Leak Protection complements brute force defense and Two-Factor Authentication (2FA). Together they stop both guessed and compromised passwords, reducing the most common login risks for WordPress sites.

    To explore more ways of keeping your site secure, check out our guide on CleanTalk Security Plugin tools for WordPress

  • Spam Bot ir**************@***il.com — How to Block It and Stop Website Attacks

    Spam Bot ir**************@***il.com — How to Block It and Stop Website Attacks

    The email address **************@***il.com“>ir**************@***il.com has been reported for sending spam and launching automated malicious requests on thousands of websites.

    • According to CleanTalk BlackLists, this address has:
    • Attacked over 10,000 websites
    • Generated approximately 6,420 spam requests every day
    • Used multiple IP addresses from Russia
    • First detected on July 2, 2025
    • Last activity recorded: September 18, 2025

    This bot attempts to exploit website forms — both contact forms and comment sections, using automated messages that appear to inquire about pricing but are actually spam attempts.


    Common Spam Messages Used:
    The bot sends messages in multiple languages, pretending to ask for pricing information:

    • “Hi, roeddwn i eisiau gwybod eich pris.” (Welsh — I wanted to know your price)
    • “Hi, მინდოდა ვიცოდე თქვენი ფასი.” (Georgian — I wanted to know your price)
    • “Ola, quería saber o seu prezo.” (Galician — I wanted to know your price)
    • “Hi, i write about price for reseller”

    These phrases are repeated across multiple websites, and the messages appear to be legitimate business inquiries, but they are part of an automated spam campaign targeting contact forms on thousands of websites.

    Here is a snapshot from CleanTalk’s logs:
    “535 requests per hour detected from multiple Russian IP addresses. All actions associated with spam form submissions and bot-like behavior using fake pricing inquiry messages.”

    irinademenkova86 gmail com Email spam report 09 18 2025 10 14 AM
    irinademenkova86 gmail com Email spam report 09 18 2025 10 14 AM

    How to Block Spam from irinademenkova86@attacker

    If you’re seeing traffic or spam submissions from this email, here’s how to stop it:

    1. Use CleanTalk Anti-Spam Plugin
      Install the CleanTalk Anti-Spam plugin for your CMS (WordPress, Joomla, Drupal, etc.). It automatically filters requests by checking emails, IPs, and behavior against the global CleanTalk Spam Database.
      This email is already blacklisted and will be blocked automatically by the plugin.

    2. Use CleanTalk BlockLists or Manually Block Spam Sources

    • Add ir**************@***il.com to your site’s manual blocklist.
    • Block IP addresses commonly used in attacks (CleanTalk logs show many from Russian IP ranges).
    • Use the CleanTalk IP/Email BlockLists Database, which includes up-to-date records of known spam email addresses and IPs. This database is updated hourly and you can integrate into your website or server for spam filtering.

    **************@***il.com“>ir**************@***il.com is a known spammer attacking thousands of sites daily with fake pricing inquiries. By installing proper anti-spam protection like CleanTalk and staying vigilant, you can block these threats before they reach your contact forms or comment sections.


    If you’re already using CleanTalk, rest assured — this spammer is on the blacklist and will be filtered automatically.


    You can check any email or IP for spam activity on our BlockLists page.

    🧩 Want full protection?

    ✅ Blocks fake registrations and spam submissions
    ✅ Filters bots and fake emails in real time
    ✅ No CAPTCHAs or puzzles – clean and fast

    Stay ahead of spam – let CleanTalk handle the bots so you can focus on your content. Protect your site in under 5 minutes.
    👉 Start now

  • CleanTalk Anti-Spam is Now Available for Calculated Fields Form Users

    CleanTalk Anti-Spam is Now Available for Calculated Fields Form Users


    With this new integration, Calculated Fields Form users can now activate CleanTalk Anti-Spam directly from their form settings. This means:


    ✅ No CAPTCHAs needed – CleanTalk works invisibly in the background
    ✅ Protects all form types – From simple contact forms to complex calculators
    ✅ Real-time spam detection – Advanced algorithms identify spam submissions instantly
    ✅ 99.998% accuracy – Industry-leading spam detection rates
    ✅ Easy setup – Enable protection with just a few clicks

    Spam submissions can:

    • Waste valuable time reviewing fake inquiries
    • Skew your analytics and reporting
    • Fill your inbox with irrelevant messages
    • Impact your email deliverability rates
    • Create security risks for your business

    With CleanTalk protection built directly into Calculated Fields Form, you can focus on creating powerful calculated forms while we handle the spam protection behind the scenes.

    How to activate integration https://cff-bundles.dwbooster.com/product/cleantalk

    Calculated Fields Form ‹ Plugins Themes and News — WordPress 09 05 2025 10 27 AM
    Calculated Fields Form ‹ Plugins Themes and News — WordPress 09 05 2025 10 27 AM

    About the Partnership
    We’re thrilled to work with the Calculated Fields Form team to bring this native integration to their users. The integration leverages CleanTalk’s powerful cloud-based anti-spam technology while maintaining the user-friendly experience that Calculated Fields Form users expect.

    Questions or Need Help?
    Our support team is ready to help you get started with CleanTalk protection for your Calculated Fields Form, su*****@*******lk.org or open a ticket here https://cleantalk.org/my/support/open.

    Protect your calculated forms today with CleanTalk Anti-Spam – because your business deserves spam-free form submissions.

  • CleanTalk Technical Support: Why Live Communication Is the New Luxury

    CleanTalk Technical Support: Why Live Communication Is the New Luxury

    In the world of automation and AI chatbots, live technical support is becoming a real premium service. When you have a question about setting up anti-spam protection or need to understand how the service works, the last thing you want is to explain your problem to a robot that gives standard answers from the knowledge base.

    Live people instead of soulless bots

    While most companies are transferring their first line of support to automated systems, CleanTalk is going against the trend. Our technical support is live people from the first second of the request. No multi-level menus, virtual assistants or attempts to “reformulate the question for the bot”.

    Why is this important for an anti-spam service?

    It would seem that there is only one problem – the form blocks users. But the solutions can be radically different depending on how exactly this form is created and integrated into the site. Just look at the number of direct integrations that we had to do – each requires its own approach. The automatic system will give a standard answer “check the settings”, and a live specialist will understand the specifics of your configuration.

    Experience that cannot be replaced by algorithms

    The average length of service of our technical support team is 6 years. During this time, people have encountered a variety of situations:

    • Non-standard hosting settings
    • Rare plugin conflicts
    • Features of various CMS
    • Specific business requirements

    When a person has been working with a product for several years, he already intuitively understands which direction to dig in. This saves time and nerves for all participants in the process.

    Knowledge of the product in detail

    Our specialists do not read ready-made scripts from the knowledge base. Everyone understands all aspects of CleanTalk:

    • How Spam FireWall works
    • Features of integration with different plugins
    • Working with the API and setting up web hooks
    • Diagnosing problems through log analysis
    • Configuring exceptions for specific tasks
    • Anti-Spam Algorithms
    • Payment details

    As a result, one person can bring the problem to an end without transferring you between different departments.

    Live dialogue solves more

    In the era of chatbots, human communication has become a rarity. But live dialogue gives what no automation can:

    • A specialist understands the context of the problem, even if you described it not very accurately
    • You can ask clarifying questions and get an answer
    • An experienced person can suggest the cause based on indirect signs
    • If necessary, you can adapt a standard solution to your situation

    Not just performers, but participants in the process

    Our support staff do not sit in a separate call center and do not work according to rigid scripts. They actively participate in the development of the product:

    • Analyze common user problems
    • Analyze clients requests feedback for anti-spam
    • Suggest improvements based on feedback
    • Test new versions and integrations
    • Help create documentation and instructions

    Therefore, when a client contacts us, a specialist thinks not only “how to solve this specific problem”, but also “how to make sure there are fewer such problems”.

    We work ahead of the curve

    The standard approach of many support services is to get as much information as possible from the client, and then start to figure it out. We do the opposite.
    After receiving a request, the specialist immediately:

    • Checks your account settings
    • Analyzes logs for the recent period
    • Looks for possible causes of the problem
    • Prepares several possible solutions

    As a result, you receive an answer not in the style of “send a screenshot of the problem”, but with specific suggestions on what to do.

    Why is this especially important for anti-spam

    An antispam system is not just a plugin that you install and forget about. It is a complex product that:

    Integrates with dozens of different forms and plugins
    Depends on server settings and hosting features
    Requires a balance between spam protection and user convenience
    May work differently on different sites

    Such tasks require an individual approach. You need a specialist who can quickly understand your specific situation and find the best solution.

    As a result

    The result of this approach is a qualitatively different level of support:

    Problems are solved faster, because time is not wasted on “pumping” through different levels
    The solutions are more accurate, because the specifics of a particular case are taken into account
    Customers receive not only a solution to the current problem, but also recommendations for the future

    Live technical support is not an additional service, but a part of our product. Because good spam protection is not only the right algorithms, but also people who will help to adjust these algorithms to your tasks.

    You can contact our support team by email at su*****@*******lk.org or create a support ticket at https://cleantalk.org/my/support.

  • Events Manager Spam Protection for WordPress

    Events Manager Spam Protection for WordPress

    Events Manager forms is a good choice when you need to use contact form for surveys, quizzes and many others. Always be sure to use the most effective Anti-Spam plugin. For example CleanTalk Anti-Spam will guarantee your Events Manager forms spam protection in about 5 minutes.

    Once CleanTalk Anti-Spam plugin is installed it starts to protect all of the existing forms on your WordPress website. It may not only be Events Manager forms but many others.

    Download CleanTalk Anti-Spam plugin | Download Events Manager 

    How to install CleanTalk Anti-Spam plugin

    To install the Anti-Spam plugin, go to your WordPress admin panelPluginsAdd New.

    Then enter «СleanTalk» in the search box and click the Install button for «Spam protection, Anti-Spam, FireWall by CleanTalk».

    After installing the plugin, click the «Activate»‎ button.

    After it is done go to the plugin settings and click the «Get Access Key Automatically» button. Then just click the «Save Settings»‎ button.

    That’s it! From now your WordPress website and Events Manager forms are protected from spam.

    You can always use our detailed installation instructions.

    How to check your Events Manager spam protection in about 5 minutes

    You can test the work of Anti-Spam protection for your Events Manager by using a test email s @ cleantalk.org (without spaces). First, open the form in an Incognito browser tab. Fill in all the required form fields and send a form. After submitting the form, you will see a block message about the block on the form submission.

    events manager test 02 1

    If you have any questions, add a comment and we will be happy to help you.

    Create your Cleantalk account – Register now and enjoy your spam-free Events Manager form.

    You may view a complete list of CleanTalk Anti-Spam plugin features here. https://cleantalk.org/help/introduction 

    WordPress spam protection

  • Asgaros Forum Spam Protection for WordPress

    Asgaros Forum Spam Protection for WordPress

    Asgaros Forum is a good choice if you want to extend your website with a lightweight and feature-rich discussion board. Always be sure to use the most effective Anti-Spam plugin though. For example CleanTalk Anti-Spam will guarantee your Asgaros Forum spam protection in about 5 minutes.

    Once CleanTalk Anti-Spam plugin is installed it starts to protect all of the existing forms on your WordPress website. It may not only be Asgaros forum but many others.

    Download CleanTalk Anti-Spam plugin | Download Asgaros plugin 

    How to install CleanTalk Anti-Spam plugin

    To install the Anti-Spam plugin, go to your WordPress admin panelPluginsAdd New.

    Then enter «СleanTalk» in the search box and click the Install button for «Spam protection, Anti-Spam, FireWall by CleanTalk».

    After installing the plugin, click the «Activate»‎ button.

    After it is done go to the plugin settings and click the «Get Access Key Automatically» button. Then just click the «Save Settings»‎ button.

    That’s it! From now your WordPress website and Asgaros forum are protected from spam.

    You can always use our detailed installation instructions.

    How to check your Asgaros forum spam protection in about 5 minutes

    You can test the work of Anti-Spam protection for your Asgaros forum by using a test email s @ cleantalk.org (without spaces). First, open the form in an Incognito browser tab. Fill in all the required form fields and submit the form. After submitting the form, you will see a block message about the block on the form submission.

    If you have any questions, add a comment and we will be happy to help you.

    Create your Cleantalk account – Register now and enjoy your spam-free Asgaros forum.

    You may view a complete list of CleanTalk Anti-Spam plugin features here. https://cleantalk.org/help/introduction 

    WordPress spam protection

  • SureForms Spam Protection for WordPress

    SureForms Spam Protection for WordPress

    SureForms is a good choice when you need to use contact form. Always be sure to use the most effective Anti-Spam plugin. For example CleanTalk Anti-Spam will guarantee your SureForms spam protection in about 5 minutes.

    Once CleanTalk Anti-Spam plugin is installed it starts to protect all of the existing forms on your WordPress website. It may not only be SureForms forms but many others.

    Download CleanTalk Anti-Spam plugin | Download SureForms 

    How to install CleanTalk Anti-Spam plugin

    To install the Anti-Spam plugin, go to your WordPress admin panelPluginsAdd New.

    Then enter «СleanTalk» in the search box and click the Install button for «Spam protection, Anti-Spam, FireWall by CleanTalk».

    After installing the plugin, click the «Activate»‎ button.

    After it is done go to the plugin settings and click the «Get Access Key Automatically» button. Then just click the «Save Settings»‎ button.

    That’s it! From now your WordPress website and SureForms are protected from spam.

    You can always use our detailed installation instructions.

    How to check your SureForms spam protection in about 5 minutes

    You can test the work of Anti-Spam protection for your SureForms by using a test email s @ cleantalk.org (without spaces). First, open the form in an Incognito browser tab. Fill in all the required form fields and send a form. After submitting the form, you will see a block message about the block on the form submission.

    Screenshot 2025 07 31 at 16.24.13

    If you have any questions, add a comment and we will be happy to help you.

    Create your Cleantalk account – Register now and enjoy your spam-free SureForms.

    You may view a complete list of CleanTalk Anti-Spam plugin features here. https://cleantalk.org/help/introduction 

    WordPress spam protection

  • IPS Community Suite 5 Spam Protection by CleanTalk

    IPS Community Suite 5 Spam Protection by CleanTalk

    Anti-spam protection for IPS Community Suite 5 is now available with CleanTalk — a cloud-powered filter that stops spam in real time without affecting user experience.

    Now there’s an easy way to stop all of that.

    CleanTalk now works with IPS 5, offering fast and automatic spam filtering — easy to set up, free to try. It connects your forum to a powerful cloud-based engine that checks every signup and post in real time. No visual tests. No manual work. Just quiet, automatic blocking in the background.

    The system uses an always-updated database of known spam sources and smart behavior analysis to stop suspicious activity before it reaches your forum. Whether you’re running a niche board or a large online community, CleanTalk scales with your traffic and works invisibly behind the scenes. You stay focused on your content — not fighting spam.

    Setup takes just a few minutes through the IPS admin panel — quick, simple, and no extra steps required. You’ll need your CleanTalk Access Key to activate protection.
    Full setup guide: cleantalk.org/help/install-ipboard5

    Anti-Spam Protection for IPS Community Suite 5


    More about CleanTalk: cleantalk.org

    Cloud-Based Anti-Spam Protection for IPS Community Suite 5

    Here’s how it works: when someone tries to register or send a message, their data is checked by CleanTalk’s cloud servers. If it looks like spam — it’s blocked. If it’s a real user — they won’t notice anything. No popups, no puzzles, no delays.

    Because all the filtering happens in the cloud, your site stays fast and clean. There’s nothing heavy to install, and no need to update rules — CleanTalk handles that for you.

    You can even test the protection by trying to register with this email:

    st********@*****le.com.

    It’ll be blocked right away if everything is working.

    CleanTalk updates its spam filters every day, so your forum stays protected — even as spam tactics change. Whether your site is small or super active, this cloud system keeps things smooth.

    Also available: CleanTalk now integrates directly with WPZOOM Forms — read more on the blog.