Webmasters Stack Exchange
Webmasters Stack Exchange

Questions tagged [hacking]

If your website may have been compromised, use the [hacked-site] tag. Use this tag for more general questions about someone accessing a system in an unintended way.

93 questions
13
votes
1 answer

Vulnerability in /boaform/admin/formLogin?

I am getting this HTTP request line on my server (simple http server). The normal action for this request on my server is to simply close the socket connection. I am asking this question because when I web search what is /boaform/admin/formLogin…
user786
  • 253
  • 1
  • 3
  • 7
9
votes
2 answers

Why is my site getting requests for URLs converted to lowercase?

On my sites I am seeing requests for what would be valid URLs, but with the path converted to lowercase. For example, a valid URL is example.com/some-product-CAT12P0.html. In my Apache logs I'm seeing example.com/some-product-cat12p0.html. This is…
user602088
  • 427
  • 1
  • 4
  • 10
6
votes
3 answers

How to determine if a user agent string has proper syntax or might be a hacking attempt?

I was checking my server via awstats to see who was visiting my site and I have a user-agent of the following value: }__test|O:21:\ Some research has lead me to believe that someone was trying to hack my server. To prevent such things from…
Mike -- No longer here
  • 13,650
  • 5
  • 29
  • 63
6
votes
2 answers

Why do hackers inject hidden links?

I discovered a hacked site recently which has a div in it with a bunch of links to casinos at the top and the div is display:none;. I understand that black hats may hack sites in order to gain backlinks, but what is the purpose if the links are…
user1721135
  • 678
  • 1
  • 8
  • 21
6
votes
2 answers

Meaning of hack request

We've been logging GET requests on our domain to the following: XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGHGFHBGCHEGPFHHGG Is this a known kind of attack? What might it be targeting?
JNF
  • 245
  • 2
  • 5
6
votes
2 answers

New requests for /cache/ URLs

A few weeks ago requests following this type of pattern: http://mysite/cache/7a226e8aa3a4380444a329a7b0dd0f40 http://mysite/otherfolder/cache/7a226e8aa3a4380444a329a7b0dd0f40 started to appear in my logs. Almost all the requests come from…
Guy
  • 543
  • 3
  • 9
6
votes
1 answer

A bounce-rate attack to manipulate SEO?

This is a question to experienced people that might help us shed some light on the issue. We noticed a very strange behavior on our site, in Google Analytics. Some dude from Finland, namely, from Kouvola city is hitting one of our pages - only one…
Denis Volovik
  • 217
  • 2
  • 8
6
votes
4 answers

How to discredit hacked links pointing at my company's website

The competition of one of my company's websites has started a really dirty campaign of acquiring hack links. One of their ingenious tactics has been to seed in links to OUR site withing their hack bot, making US look like we might be responsible for…
Dan Gayle
  • 858
  • 7
  • 16
5
votes
4 answers

Wordpress site hacked numerous times

Because of the identity of the website, I don't want to give too much identifying information about the actual organization, but I can try to provide as much server background information as possible. I am managing a Word press site and all seemed…
Wold
  • 392
  • 1
  • 2
  • 10
5
votes
1 answer

Repeated calls with random Javascript append to the URL

I keep getting calls to my server where there is random Javascript appended on the end of lots of the calls,…
cjk
  • 313
  • 2
  • 12
4
votes
2 answers

URL hijacked for spam

I'm the Webmaster and administrator for a site, built on Drupal 7. I've updated Drupal to the latest version. My issue is that it seems as if someone or somebot is using our url. Has my legitimate site/server been hacked? Also when searching…
A. Evans
  • 41
  • 2
4
votes
2 answers

Parallel website running a copy of my original website

We have been working on a gaming website. Recently while making note of the major traffic sources, I noticed a website that I found to be a carbon-copy of our website. It uses our logo, and everything else the same as ours, but with a different…
Suhail Gupta
  • 295
  • 1
  • 8
4
votes
7 answers

Hacked by our own hosting company!

OK, so our hosting company decided to clone our site and database onto a new serve. Without our knowledge or permission they then edited our code to point to the new database. The old server was left running, still pointing at the original database.…
dazhall
4
votes
2 answers

Website hack resulting in auto redirect - where to start looking?

My website is being redirected to a non-existent page (/showpage.php) for some users when they hit the homepage. For other users, the site works fine. I have looked in the index.php files and some other commonly used files. I believe strongly that…
spence0021
  • 41
  • 1
4
votes
3 answers

Google says my site contains malware

my clients site http://bit.ly/dTOfGF (i used url shortener). I have tried everything to find the malware but i couldnt. I tried the Google checklist http://googlewebmastercentral.blogspot.com/2007/09/quick-security-checklist-for-webmasters.html i…
fswd
  • 201
  • 1
  • 7
1
2 3 4 5 6 7