Bunch of Redirect http://site.ru Hacked??

Discussion regarding Joomla! 3.x security issues.

Moderators: mandville, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
Locked
Phil973
Joomla! Apprentice
Joomla! Apprentice
Posts: 20
Joined: Mon Apr 23, 2018 9:15 pm

Bunch of Redirect http://site.ru Hacked??

Post by Phil973 » Wed May 09, 2018 1:19 am

Hi,
Was working on redirection related google crawl and find out that on my Joomla/Redirects:links have a bunch of Disabled ones in which a lot with "Referring Page" http:site.ru

Any advise most welcome in how to deal with Redirects:links not set by user but (seems) to be set by system (have a lot related to JCH Optmize) but specially how to deal with the suspicious ones.

Generally, how to prevent this kind of situation?? so far never give any credential to anybody - just find out 2 account user suspicious but never activate them....

Any wise advice most welcome
Thanks in advance

sozzled
I've been banned!
Posts: 13639
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia

Re: Bunch of Redirect http://site.ru Hacked??

Post by sozzled » Wed May 09, 2018 1:25 am

I get this a bit but it's nothing to be worried about. See my reply to a similar question you asked viewtopic.php?f=706&t=961756&p=3523649#p3523539

Phil973
Joomla! Apprentice
Joomla! Apprentice
Posts: 20
Joined: Mon Apr 23, 2018 9:15 pm

Re: Bunch of Redirect http://site.ru Hacked??

Post by Phil973 » Wed May 09, 2018 2:10 am

Hi thanks for interacting on the matter.
The link you provide on your answer is related to another subject almost resolved now (don't ask me how...just by fact error 404 stops growing)
About this redirects "generated by the system" is it a wise strategy to disable "Collect url's" on the redirect plugin?
if doing so, I will be able still to redirect Manually right??

Thanks

sozzled
I've been banned!
Posts: 13639
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia

Re: Bunch of Redirect http://site.ru Hacked??

Post by sozzled » Wed May 09, 2018 4:26 am

AFAIK, the Redirects component requires the plugin to be enabled. I've not attempted to use the Redirects component with the plugin disabled. The component doesn't redirect anything (unless you "tell" it to); best idea is to read the documentation about the component. The component, in the first place, tells you what attempts were made to access URLs that result in a 404 error (the plugin—when enabled—collects this information). After you've discovered these 404s you can then change the target of the URLs to go somewhere else (e.g. send them off to Google, if you want). Make sense?

Phil973
Joomla! Apprentice
Joomla! Apprentice
Posts: 20
Joined: Mon Apr 23, 2018 9:15 pm

Re: Bunch of Redirect http://site.ru Hacked??

Post by Phil973 » Wed May 09, 2018 8:17 am

Hi again, make perfectly sense yes....I use often this component to update links from my site.
My point is, as it seems that the system generate "itself" redirections, and this redirections are all disabled (and only contain expired url's) is it reasonable to trash this ones, specially suspicious ones (http://site.ru)
Sorry for this bunch of questions but I feel quite inconfortable with this files

sozzled
I've been banned!
Posts: 13639
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia

Re: Bunch of Redirect http://site.ru Hacked??

Post by sozzled » Wed May 09, 2018 8:52 am

Are you asking if it's reasonable to do "something" with referrer spam (i.e. 404 errors generated from http://site.ru)? Is that your question? I hope you understand that there are no actual files involved here.

User avatar
fcoulter
Joomla! Ace
Joomla! Ace
Posts: 1685
Joined: Thu Sep 13, 2007 11:39 am
Location: UK
Contact:

Re: Bunch of Redirect http://site.ru Hacked??

Post by fcoulter » Wed May 09, 2018 2:16 pm

Yes, Joomla does require the system - redirect plugin to be enabled in order to make redirects work.

If you don't like the system collecting URLs that generate an error then there is an option in the plugin settings "collect URLs", you can turn it off. It sounds like that would be the best option for you.

Also there is no problem with purging the automatically generated redirect URLs, if they are not useful they are just cluttering up your database so that is the best course of action.

As Sozzled says, there are no actual files involved. It is just referrer spam. It does no actual harm, apart from the nuisance with non-existent URLs being collected in your databse.
http://www.spiralscripts.co.uk for Joomla! extensions
http://www.fionacoulter.com/blog my personal website
Security Forum moderator :: VEL team member
"Wearing my tin foil hat with pride"

Phil973
Joomla! Apprentice
Joomla! Apprentice
Posts: 20
Joined: Mon Apr 23, 2018 9:15 pm

Re: Bunch of Redirect http://site.ru Hacked??

Post by Phil973 » Wed May 09, 2018 6:55 pm

Thanks guys for your advices, appreciate, will work on that now


Locked

Return to “Security in Joomla! 3.x”