The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
0answers
36 views

My info@ email address keeps sending SPAM mails

Since somewhere in april my info@ email address is being used to send SPAM emails. I first noticed it when I received a 'Mail Delivery System' email with the message that an email couldn't be sent ...
1
vote
0answers
38 views

Website content was copied resulting in decreased traffic

My website with automobile niche has been struggling to stand again plagiarism and bot-attacks from last few months.In last quarter, 3 different domains were setup with exact replica of all the ...
1
vote
0answers
30 views

Receiving errors for a domain I don't control

I have my site set up to email me whenever an error happens, and recently I've been getting an occasional notification (a few per day) about a page not found error, but the weird thing is that the ...
3
votes
2answers
297 views

How can I avoid being hacked? [closed]

I have a website built on Joomla/PHP and it was going well until I found a RewriteCond directive in my .htaccess file to a website with porn content. RewriteEngine On RewriteCond %{HTTP_ACCEPT} ...
3
votes
3answers
45 views

How to determine if a user agent string has proper syntax or might be a hacking attempt?

I was checking my server via awstats to see who was visiting my site and I have a user-agent of the following value: }__test|O:21:\ Some research has lead me to believe that someone was trying to ...
5
votes
1answer
111 views

Someone else set up a trial Google Apps account on my domain. How can I get Google to disable it?

I own my domain (say, mydomain.com) and administer it through my hosting provider. A couple of days ago, I started receiving mail from Google Apps addressed to jyotioffsetjsm01@mydomain.com. There's ...
1
vote
2answers
287 views

Site hacked: redirecting to other site?

I have a site that appears and works fine. However if you search for it in Google a whole lot of other links come up, eg: mysite.com/kamagra-viagra.html Clicking this I get redirected to the ...
4
votes
2answers
112 views

URL hijacked for spam [closed]

I'm the Webmaster and administrator for a site, built on Drupal 7. I've updated Drupal to the latest version. My issue is that it seems as if someone or somebot is using our url. Has my legitimate ...
1
vote
1answer
98 views

Site search results showing strange foreign letters and images

I'm having some strange characters show up on a site search using Google. I've gone through the WordPress files and could not find anything strange. Also ran a malware detect on the site. The ...
3
votes
1answer
74 views

Brute force attack traced to a specific web host

My website was recently brute force attacked. An agent attempted to log in by guessing various user and password combinations. The I.P. address was traced to hosting company in Germany. I contacted ...
0
votes
1answer
81 views

Preventing phpMyAdmin hacks

I recently saw an unexpected error in my error log, and upon investigating, found it repeated many times. What are the deviants trying to accomplish, and is there any risk of them accomplishing it. ...
1
vote
0answers
21 views

Query strings showing in SERPs

One of our sites got hacked, we believe we have resolved this issue, but when doing a site:example.com in Google, we are still seeing query strings like: example.com/?black-book-subtitles. Could it ...
1
vote
1answer
109 views

I found some weird exploit

I call it 'Meta-jacking'. So this website I found has a meta with content="" and whatever you type in the description displays your text in the content. So I took advantage of this and typed: ...
1
vote
1answer
22 views

How to hide error log from hackers? [duplicate]

I'm a developer of self hosted web application. which creates the error log but others can access it rather than only admin of that application. is there any way to protect it from page other people ...
3
votes
1answer
168 views

My website redirects to another website on google searches

I'm not sure if my website has been hacked or what have happened. When I do some searches on google in which my website should show up, my website with a different url name does. It maintains the ...
0
votes
0answers
30 views

What kind of attack causes a JavaScript 'out of memory' on the attackers device?

We experienced a strange attack yesterday. Our error log picked up the same 'out of memory' JavaScript error from a single IP address every 10 seconds. The requests came from 6 client ports on the ...
6
votes
2answers
282 views

Meaning of hack request

We've been logging GET requests on our domain to the following: XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGHGFHBGCHEGPFHHGG Is this a known kind of attack? What might it be targeting?
2
votes
1answer
67 views

Suspicious script loads ONLY when navigating to site via search engines

I cannot find anywhere on our site where this code is referenced. More importantly it does not appear when navigating directly to our URL, it only appears when coming from a search engine (including ...
2
votes
2answers
228 views

How does Google prevent GA accounts from being spammed [closed]

Since the Google Analytics snippet is available in the source code of the page (e.g. below is stackexchange's) <script type="text/javascript">var ...
0
votes
0answers
19 views

How to stop parallel downloads

In my server logs I noticed random sets of IP's originating from china that are downloading the same file of about 16MB every couple of hours, and every time the computer downloads it, it starts the ...
2
votes
4answers
504 views

WordPress keeps redirecting my users to install.php, Is it caused by an injection hack?

I don't really know how to express my problem, so bear with me. This is a bit hard to explain. I have a Wordpress installation, the latest, and often (once a day) my site redirects users to the ...
1
vote
0answers
84 views

Is a privacy policy page really necessary on pages designed for potential hackers?

I have a system setup on my server where users who consistently refresh the page at a ridiculously high rate are redirected to a special page where they have to wait a certain amount of time or to ...
1
vote
0answers
34 views

Security and Apache Methods

I occasionally get annoying POST requests but one lately caused a 500 error. Not a biggie really, but it got me thinking. My site does not have but one form. Outside of this, POST should not exist ...
0
votes
0answers
14 views

WordPress site hacked, recovered but Google still has hacked page description [duplicate]

My website got hacked recently and recovered it. It was populating casino ads on my website. There were virtually made URLs where casino pages were displayed. I suspected the code came through a ...
0
votes
1answer
400 views

What malware inserts a .htaccess redirect to Adf.ly?

I am hosting a few websites for customers, and a bunch of them have been hacked today. The hack consists of a simple .htaccess file that redirects to adf.ly. This is the second time I have been ...
0
votes
0answers
321 views

How to prevent TYNT from inserting Iframes into my site [closed]

I have a wordpress site and since two days ago an iframe is showing up above the </body> tag. The iframes are not always the same and they wont show up everytime, they show up like 90% of the ...
4
votes
4answers
375 views

Wordpress site hacked numerous times

Because of the identity of the website, I don't want to give too much identifying information about the actual organization, but I can try to provide as much server background information as possible. ...
1
vote
2answers
59 views

After the home page was redirected by a hack, it is no longer indexed. How long until it comes back?

My site was hacked, and the index page was 302 redirected. It took me a few months to get all this sorted. In the meantime, the home page lost its PageRank and was no longer included in the index. I ...
0
votes
1answer
81 views

Reset Connection causing multiple errors after hack

We use webmaster tools to monitor our websites, and in the past couple of months some of our sites have been compromised and had various pages inserted. These pages created URLs that Google would ...
1
vote
2answers
231 views

How do I prevent access to SPAM URLs and remove them from Google's index?

When I started managing my friends' website, I had found a folder in it with a bunch of garbage HTML files with names such as: free-nasscamd-server-31day, gorilla-quentin-trollip-pdf, etc... Assuming ...
2
votes
2answers
94 views

Server log what does “ho=<something>” mean?

I have got a Joomla site that got hacked and I am looking at the server logs and I see something like: GET /bind.php ...
3
votes
2answers
195 views

Parallel website running a copy of my original website

We have been working on a gaming website. Recently while making note of the major traffic sources, I noticed a website that I found to be a carbon-copy of our website. It uses our logo, and everything ...
0
votes
1answer
91 views

imaginaryTeachingToolUrl

I found an increased access to my website on www.mydomain.tld/imaginaryTeachingToolUrl. This isn't a valid URL on my site, I tried to Google this, but there are under 10 results. So I guess this ...
2
votes
5answers
579 views

Chinese bots in my forum

I have a small community forum that doesn't really get posts or any real traffic. The only thing that happens on the regular is bots with Chinese IPs signing up gibberish usernames. Most bots don't ...
0
votes
1answer
130 views

How to determine if someone is accessing our database remotely?

I own a content publishing website developed using CakePHP(tm) v 2.1.2 and 5.1.63 MySQL. It was developed by a freelance developer who kept remote access to the database which I wasn’t aware of. One ...
2
votes
1answer
217 views

What was this hack-bot trying to achieve via directory traversal?

I was walking through my server logs and the following kinda stunned me: ACCESS ERROR 404 from IP 62.112.152.161: Path: /index.php?page=weblog&env=../../../../../../../../etc/passwd%00 ...
1
vote
2answers
69 views

How can we find real source of suspected user entries?

I have a website where I keep logging the user entries. I found some anonymous entries in my table and I suspect they are using some kind of proxy switchers. How can I find the real source of these ...
6
votes
2answers
349 views

New requests for /cache/ URLs

A few weeks ago requests following this type of pattern: http://mysite/cache/7a226e8aa3a4380444a329a7b0dd0f40 http://mysite/otherfolder/cache/7a226e8aa3a4380444a329a7b0dd0f40 started to appear ...
4
votes
2answers
215 views

Website hack resulting in auto redirect - where to start looking?

My website is being redirected to a non-existent page (/showpage.php) for some users when they hit the homepage. For other users, the site works fine. I have looked in the index.php files and some ...
1
vote
2answers
1k views

What is HTML:imghack-a [Trj]?

One of my websites (Joomla) is being blocked by Avast when I try to go to the administrator page. I get the message that there is an HTML:imghack-a [Trj] threat. I guess its a trojan, but I cannot ...
2
votes
2answers
290 views

Safely backup and migrate a hacked and infected WordPress site

I have an old WordPress site that was on really bad shared hosting and has been hacked into smithereens. It's been compromised by multiple (different) people, as far as I can tell. It's pretty bad! ...
2
votes
1answer
533 views

Site hack… but what is this?

My site have been hacked (i think) here is the code... the question, how to find what it does... <?php $zend_framework="\x63\162\x65\141\x74\145\x5f\146\x75\156\x63\164\x69\157\x6e"; ...
1
vote
3answers
2k views

My website has been hacked/attacked, says “reported attack page”

Three days back my website ganapatihegde.com has been hacked/attacked by some hacker. Now, when anyone tries to see my website, it says "Reported Attack Page!". I am using server provided by Free ...
6
votes
2answers
913 views

Why do hackers inject hidden links?

I discovered a hacked site recently which has a div in it with a bunch of links to casinos at the top and the div is display:none;. I understand that black hats may hack sites in order to gain ...
3
votes
2answers
120 views

Am I being hacked or harvested? [closed]

I just did some log analysis of Q1 for one of my client's sites. There were about 30,000 sessions created for this site for each of the five separate IP addresses starting with 79.171.81.xxx. 150,000 ...
1
vote
1answer
218 views

.htaccess keeps being deleted from my root directory

I have a site built on the ModX Evo CMS. I have noticed that almost every day the .htaccess file is deleted meaning the FURLs no longer work. I have scanned for viruses and found nothing. Does anyone ...
0
votes
1answer
328 views

JQuery Plugin files getting viruses even with CHMOD 755

I have a bunch of JQuery plugins (eg: masonry, isotope, carousel, etc) within a JavaScript folder in my root. These have been repeatedly infected with viruses making Google put alerts on my site. The ...
-1
votes
1answer
229 views

Need help in removing and forbidding some kind of malware in my website [closed]

I have a website based on Joomla 2.5. Recently people with AVG anti-virus started to complain that some strange windows appear when they open the site. An unknown line of code with comments "Google ...
2
votes
1answer
161 views

Script injection on different hosting servers = FTP hacking?

I've been facing the exact same injected script on several of my websites for the last few weeks. Today I realize these websites don't share the same hosting servers, yet the attacks (1) started at ...
2
votes
2answers
334 views

Any suggestions for a change detection system?

As a webdesigner/webmaster I'm taking care of various websites. Recently one client's website got "hacked". It turned out that at their office one computer got infected by a trojan, that spied the ftp ...