• Help .. .here is my problem.
    http://countrycousinstore.com/modules/fckeditor/fckeditor/editor/filemanager/connectors/uploadtest.html
    ok im new to building any kind of website and well I just put a site together. I don’t know anything about anything. Databases, sql, my wordpress site which is a theme I uploaded. But I did notice this. ive scanned my computer.. scanned using wordfence. Here is what im coming up with. I noticed I would go to this url and my site would show up. http://countrycousinstore.com/ but I am at trimandwin.com. Can someone tell me in laymen’s terms what to do. I know it has to be bad.
    http://www.trimandwin.com/
    I have the latest version of wordpress

Viewing 15 replies - 1 through 15 (of 18 total)
  • Do you own both domain names?

    Thread Starter alaskavv

    (@alaskavv)

    No not at all! i just noticed it in my wordfence scanning. I kept seeing Russia trying to access a non existent page and coming from those urls. And i was like errm what is this ? so i went to those urls posted and my site was on it.

    Thread Starter alaskavv

    (@alaskavv)

    China China visited http://countrycousinstore.com/
    7 hours 1 min ago IP: 180.76.6.142 [block]
    Browser: Baiduspider version 2.0
    Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
    [Block this IP] — [Block this network] — [Run WHOIS on 180.76.6.142] — [See recent traffic]
    oh and china
    France France arrived from http://countrycousinstore.com/ and visited http://countrycousinstore.com/
    1 hour 26 mins ago IP: 62.210.189.102 [block] Hostname: 62-210-189-102.rev.poneytelecom.eu
    Browser: IE version 6.0 running on WinXP
    Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
    [Block this IP] — [Block this network] — [Run WHOIS on 62.210.189.102] — [See recent traffic]
    Russian Federation Saint Petersburg, Russian Federation arrived from http://COUNTRYCOUSINSTORE.COM/sites/all/modules/fckeditor/fckeditor/editor/filemanager/connectors/uploadtest.html and tried to access non-existent page http://COUNTRYCOUSINSTORE.COM/sites/all/modules/fckeditor/fckeditor/editor/filemanager/connectors/uploadtest.html
    3 hours 7 mins ago IP: 37.9.53.91 [block]
    Browser: IE version 6.0 running on WinME
    Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)
    [Block this IP] — [Block this network] — [Run WHOIS on 37.9.53.91] — [See recent traffic]
    Heres stuff that showing up in wordfence

    Thread Starter alaskavv

    (@alaskavv)

    its all foreign countries accessing these non existing pages…… which my site is posted on countrycousinstore.com. I went to the url and I just don’t get it.

    I don’t think this has anything to do with WP itself. And a scan of your site is clean but something decidedly weird does seem to be going on.

    Have you spoken to your hosts about this? I noticed that both domain names have been registered with GoDaddy.

    Thread Starter alaskavv

    (@alaskavv)

    Its odd I still think something is not right. I talked to godaddy and they said someone just linked to my site and I should be happy that someone linked to my site. But they scanned it and said no one is linked to my site. Then they were like hmmm .. don’t worry we sure its nothing. Even though no one is showing to be linked to your site we are sure that’s what it is. My whole site is on another url.. is that what happens when you link to a site? odd

    Thread Starter alaskavv

    (@alaskavv)

    Esmi… can you please delete what I said above.. there is a reason for this.. every since I posted this my site keeps being spammed… hit.. security risks.. Just the stuff pertaining to my site. I cant stop it… please take this off. Im new to wordpress and wasn’t aware that I didn’t have an option to delete and im also a new member. Please I cant take any more stuff happening to my site. please delete this thread or just posts about my site.

    Andrew Nevins

    (@anevins)

    WCLDN 2018 Contributor | Volunteer support

    What exactly do you want deleted and for what reason?

    Thread Starter alaskavv

    (@alaskavv)

    Oh I thought I posted the reason above. Ever since I posted here my site has tripled in the bad hits that it got. I just want to the post with my domain name above( the 1st one) deleted please. I am new to this forum and didn’t realize that once I posted something regarding my site that I was just asking for my site to be ass raped. I keep getting spammed, my site is getting overloaded, I had to go in and change stuff in my site and its not getting better. I woke up and [redacted] again in my sleep. Just please erase it the post with my domain please. Im begging you. Next time I will be careful in what I say. I also read the rules for deleting the thread or a post. I fit the criteria. Like I said before and now. the security breaches/spam/overloading my server/ everything. for my site have went through the roof since I posted in here. so please help..

    Andrew Nevins

    (@anevins)

    WCLDN 2018 Contributor | Volunteer support

    That sounds fine, but I’ll wait for a moderator to review my decision before I remove your links.

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    I’m sorry but that’s only done in an extreme case.

    We reserve the right to delete topics or posts that are off-topic or detrimental to the community, however it is not the general policy to edit or delete forum posts unless they are spam or outright abuse.

    http://codex.wordpress.org/Forum_Welcome#Deleting_.2F_Editing_Posts

    I’ve added the emphasis. This is not an extreme case and the forum posts here are duplicated in many other places outside of these forums.

    This is not an extreme case and deleting the URLs wouldn’t do anything for those other copies.

    Andrew Nevins

    (@anevins)

    WCLDN 2018 Contributor | Volunteer support

    To clarify, even though the issue raised wasn’t necessarily related with WordPress it can still benefit the WordPress community?

    Thread Starter alaskavv

    (@alaskavv)

    Am I actually seeing this? A new wordpress user didn’t realize that putting a post on here would cause her site to be in real trouble especially when I launch an event in 20 days?? And ALL I HAVE BEEN WORKING ON SINCE I POSTED MY DOMAIN IN HERE IS SECURITY, overloaded servers, spam, constant break in attempts. ! All I am is asking that domain be deleted. It would be considered sensitive information due to the situation. I am in tears right now because of this. What makes me sad and upset is that you actually could help me but you choose not to. I really thought this was a friendly helpful community. It sucks that I am doing this all my self. I have to self promote this event and im on a deadline and I can’t even do anything because all I did was post a domain in here and I have quadrupled my pain. And this isn’t an extreme case???….. what makes it extreme.. I lose my site completely? If I don’t succeed with what im doing, I will slit my wrists and you will be in my suicide letter. thanks

    Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    🏳️‍🌈 Advisor and Activist

    I have de-linked the URLs. But I actually doubt it was being posted here that did it. Barely 2% of my traffic comes from WPORG! and I’m posted all over the darn place. More likely you’re experiencing a well know occurrence of a DDoS attack of morons trying to brute force into your server. We’ve all faced that one :/ it’s totally unrelated.

    Of course, that’s unless you’ve actually looked at your server logs and verified that this traffic comes from WPORG. Which would be how one proves an ‘extreme case’ and not guesswork.

    You can block countries also. I don’t know what your blog is about but would you need Russia, China, Thailand, etc. to have access?

Viewing 15 replies - 1 through 15 (of 18 total)
  • The topic ‘Hijacked, copy url,’ is closed to new replies.