Hacked blog

  • charco

    (@charco)


    17 years ago

    I have been hacked into somehow. There are many links appearing in my blog in the search engines such as google for porno and gaming websites. However, there are no visible entries in the blog except for the legit ones. Somehow somebody has set a script in the blog that shows my website address and people clicking on the search engines are taken to what seems to be my website on which there are loads of dodgy links. The site is https://ibchem.com and the blog address is https://ibchem.com/blog/

    For example a search for “maria swan” on Google comes up with “ibchem.com/blog/maria-swan-breast-pictures.html “
    However when I admin the blog there is nothing there.

    Likewise a search for “pedo porn” reveals some pages that are “ibchem.com/blog/p.e.d.o.porn.html” and “ibchem.com/blog/activation-key-avg.html”

    Clearly this is very disturbing. What can I do short of uninstalling the blog?

    I noticed that I was receiving an unusual amount of activity (it had doubled overnight) so I followed the backlinks using the web stats. I found: ib chemistry 54 0.8 %
    ib chem 32 0.5 %
    ibchem 22 0.3 %
    ib chemistry syllabus 21 0.3 %
    ka of phenolphthalein 20 0.3 %
    roberta smallwood 17 0.2 %
    maria swan 16 0.2 %
    phenolphthalein pka 13 0.2 %
    dawn avril 13 0.2 %
    ib chem notes 11 0.1 %
    ka phenolphthalein 11 0.1 %
    ib chemistry notes 10 0.1 %
    chemistry 10 0.1 %
    chemistry ib 9 0.1 %
    phenolphthalein ka 9 0.1 %
    pka phenolphthalein 7 0.1 %
    electronic arrangement 7 0.1 %
    nubile.net 7 0.1 %
    ka indicators 7 0.1 %
    ib chem syllabus 7 0.1 %
    ka of bromophenol blue 7 0.1 %
    worms 3d crack 7 0.1 %
    suprman free gams 7 0.1 %
    pedo porn 7 0.1 %
    what determines if an acid is strong or weak 7 0.1 %
    mather sex 7 0.1 %
    pka of phenolphthalein 6 0 %
    water of crystallisation 6 0 %
    mexicanlust 6 0 %
    dawn avril zip 6 0 %
    wpa_kill download 6 0 %
    bromophenol blue pka 6 0 %
    pka of indicators 6 0 %
    sweet krissy torrent 5 0 %
    ka of methyl orange 5 0 %
    ib chemistry 2009 syllabus 5 0 %
    ibchem.com 5 0 %
    yahoo webcam hack 5 0 %
    sexfilm free 5 0 %
    windows server 2003 keygen

    etc…

    You will notice that there are many dodgy looking back links mixed up with the legit chemistry links.

    Please help

Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter charco

    (@charco)

    It’s me again. I found two files in the ibchem.com/blog directory which I have wiped off the website but kept on the hard drive for examination if anyone wants to see them. One is a htaccess file and the other is called 118267.php.

    After wiping the files out, the blog still works, but now all of the links that google threw up (literally) for dodgy stuff no longer return any pages.

    These files were added a couple of months ago without my knowledge. Any idea how this could happen?

    Jeremy Clark

    (@jeremyclark13)

    Yeah poor server administration. Your root directory was apparently left world writable.

    Thread Starter charco

    (@charco)

    If I change the root directory to ‘not writable’ will the sub-directories still work for the blog then?

    Jeremy Clark

    (@jeremyclark13)

    Good resource
    https://codex.www.ads-software.com/Hardening_WordPress#File_permissions

    Thread Starter charco

    (@charco)

    thanks – very useful

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Hacked blog’ is closed to new replies.