Spam links…

  • ems4him

    (@ems4him)


    11 years, 8 months ago

    I continue to get requests (nearly 300 in the past 2 weeks) for a page that does not exist on my site. So they land on 404 error pages.

    They’re trying to go to mydomain[dot]com/yih/buy-soma-online

    what the heck is /yih/buy-soma-online

    If you google “/yih/buy-soma-online” with quotations, the results are freaky… I’m assuming they’ve injected some code somewhere on my site – so maybe a permisisons issue somewhere or a plugin vulnerability?

    I’m also now getting lots of failed login attempts for random user names.

    Any help would be greatly appreciated.

Viewing 1 replies (of 1 total)
  • AITpro

    (@aitpro)

    11 years, 8 months ago

    Amazing how much you can piece together just by Googling a WP member name. 😉 I see that you developed this site: mxxxxxxmuxxx.com for someone else. I checked that page on that site and did not find anything. Scanned the site and did not find anything. did a Google inurl search and there are spam comment URL’s referring to the mxxxxxxmuxxx.com/yih/buy-soma-online site URL so that is where those 404’s are coming from.

    Logically here is my guess: At one point (February-April 2014) this site was hacked and hackers were using it as a victim site to redirect their spam links to this site, which then redirected those visitors to other victim sites or back to one of their hacker sites. At this stage you have old indexed URL’s pointing to this URL so you should probably handle them like any other 404 error and create a RewriteRule or Redirect rule for this URL.

Viewing 1 replies (of 1 total)

The topic ‘Spam links…’ is closed to new replies.