• I’m just looking for some insight into what might be going on with my WordPress-driven blog. I was one of the unfortunate ones that got hit with the hidden spam links hack. I finally got that resolved by completely deleting everything in my wordpress directories and reinstalling it from scratch. Since that time, I’ve been keeping a close eye on the blog in general, watching for anything that could be suspicious.

    About three weeks ago, I started to get hit by traffic that was seemingly driven by Russian referrers (.ru sites, etc, were showing up in my traffic stats). I looked at the sites, but they were not overtly referring traffic to me, through I was showing hundreds of hits a day. Then, suddenly that stopped.

    However, today, I am now showing hits from the following referrers, seemingly from my own site: (obviously, Ive replaced the real domain with “mydomain”)

    http://www.mydomain/CodeLibrary/Includes/Functions/
    Client/General/fHxExternalLinks.js

    http://www.mydomain/CodeLibrary/Includes/Functions/
    Client/Help/callForHelp.js

    I’ve looked and it looks like these directories don’t appear on my server.

    So, am I being paranoid because of my previous problem with hackers, or might there be something going on?

    Your insight is appreciated.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Thread Starter icash

    (@icash)

    I got an answer on this from someone who notified me that a phishing hack and been placed in my wp-content folder (file: online.php). Additionally, a .htacess file had ben loaded into the same directory.

    Not good.

    Thread Starter icash

    (@icash)

    Just an fyi, in case anyone else has this problem. After reviewing my site, I had many php files uploaded into my wp-content folders.

    Does anyone know of a way to monitor activity so that one might be notified if these sorts of files are added to your sites?

    Thread Starter icash

    (@icash)

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Strange referrers’ is closed to new replies.