Is some one using my web site or hacking into it?

Discussion regarding Joomla! 1.5 security issues.
Joomla! Vulnerable Extensions: http://feeds.joomla.org/JoomlaSecurityV ... Extensions

Moderator: General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security Checklist
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.
Locked
holographic
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 118
Joined: Wed Apr 07, 2010 10:27 am

Is some one using my web site or hacking into it?

Post by holographic » Thu Sep 15, 2011 12:52 pm

there are some strange things happening on my web site. one is all the top links to my site are coming from russia and have nothing to do with the topic on my web site. also when I look at the web sites they have come from there is no link to http://www.holographic-breathing.com which is my site plus all the links come in multiples of three as shown below. this table is from my server blue host
http://removed 18 18
- http://removed 18 18
- http://removed 15 15
- http://removed 12 12
- http://removed 9 9
- http://removed 9 9
- http://removed 6 6
- http://removed 6 6
- http://removed 6 6
- http://removed 6 6
- http://removed 6 6
Also I am not sure if they are connected but I had this email and blue host said it meant my site had been black listed for some reason and were looking into it but have not come back to me as yet.

Hi. This is the qmail-send program at oproxy8-pub.bluehost.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<[email protected]>:
212.125.129.164 does not like recipient.
Remote host said: 550 5.7.1 <[email protected]>-<[email protected]> Rejected: oproxy8-pub.bluehost.com listed at dnsbl-1.uceprotect.net try <http://admin.cuci.nl/blacklist.rxml?ip=69.89.22.20>
Giving up on 212.125.129.164.

--- Enclosed are the original headers of the message.
(Body supressed)
Last edited by alikon on Thu Sep 15, 2011 4:04 pm, edited 2 times in total.
Reason: removed hacker link

User avatar
alikon
Joomla! Champion
Joomla! Champion
Posts: 5941
Joined: Fri Aug 19, 2005 10:46 am
Location: Roma
Contact:

Re: Is some one using my web site or hacking into it?

Post by alikon » Thu Sep 15, 2011 4:06 pm

probably your account is used as a "zombie"

do a security check list http://docs.joomla.org/Category:Security_Checklist
Nicola Galgano
i know that i don't know
www.alikonweb.it

User avatar
mandville
Joomla! Master
Joomla! Master
Posts: 15152
Joined: Mon Mar 20, 2006 1:56 am
Location: The Girly Side of Joomla in Sussex

Re: Is some one using my web site or hacking into it?

Post by mandville » Thu Sep 15, 2011 4:56 pm

At the start of this forum is a post called
BEfore you post, read this.

Follow the instructions
HU2HY- Poor questions = Poor answer
Un requested Help PM's will be reported, added to the foe list and possibly just deleted
{VEL Team Leader}{TM Auditor }{ Showcase & Security forums Moderator}


Locked

Return to “Security in Joomla! 1.5”