Hello,
Thank you for contacting us and sorry for any inconvenience that might have been caused due to that.
If your website is not in the Japanese language then it is possible your website is affected by the famous Japanese keyword hack, and you should take immediate actions to fix it.
Please check the URL below and follow the troubleshooting steps to take immediate action:
https://web.dev/fixing-the-japanese-keyword-hack/
Also, we suggest you to disable the Noindex Search Results
option from your WordPress Dashboard > Rank Math > Titles & Meta > Misc Pages. For more details, you can check this URL: https://rankmath.com/kb/internal-site-search-spam/
Regarding the feed URLs, they are only basic code versions of your actual content pages. You will not want these pages to be indexed as Google doesn’t like them and would most not likely not show them to users anyways.
If you wanted to disable them on your site, you can follow this guide:
https://kinsta.com/knowledgebase/wordpress-disable-rss-feed/
Alternatively, you can disallow bots from crawling the feed URLs from the robots.txt file at WordPress Dashboard > Rank Math > General Settings > Edit Robots.txt
User-Agent: *
Disallow: */feed/
Once done, give Google some time to recrawl your site to reflect the changes.
Hope that helps and please don’t hesitate to let us know if you have any other questions.
Thank you.
Thank you for suggesting to me these approaches. But the internal links that are created are not indexed, it is seen only in the search console. But these links are created regularly on my site.
Does these links affect my Site SEO?
Please suggest me the right Site SEO that I need to maintain to avoid this hacks in future.
Thank you RankMath Team for the swift response.
Hello,
You could get penalized if you have too many of these links on your site:
https://developers.google.com/search/docs/essentials/spam-policies
RSS feed attacks can be caused due to various reasons. Most primarily due to database or corrupt WordPress installation.
You can follow these steps for ensuring that your site is secured:
1. Disable / change the FTP password if you’re using it.
2. Change the DB password to something strong.
3. Use any security plugin like WordFence.
Also, to figure out how Google is discovering those spam URLs, you should use the URL inspection tool of your GSC account to check the URLs and check the referring page where are they coming from.
Hope that helps.
Hello,
Since we did not hear back from you for 15 days, we are assuming that you found the solution. We are closing this support ticket.
If you still need assistance or any other help, please feel free to open a new support ticket, and we will be more than happy to assist.
Thank you.