We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
MODX Community Forums Archive

Is my Modx Powered site being hacked?

    • 5091
    • 332 Posts
    chinesedream Reply #1, 17 years, 11 months ago
    This seems scary to me, I checked my google analytics site stats and see this url listed in the Content View ’pages’ section

    /http://www.shellbox.com.ar/[c]/c99.txt

    If you remove the directory C, you can actually see a list of shell directories.
    http://www.shellbox.com.ar/

    It looks like Spanish to me, and I have two visitors from Spain today as well as a couple countries that are notorious of spam and hackers.
    Another thing, quite a number of visitors arrived my site via these keywords in the past few days: "powered by modx cms", "powered by modx". Makes me think hackers are trying to exploit the Modx system. Yes?


    tee

      • 25663 MODX Staff
      • 12,272 Posts
      Ryan Thrash Reply #2, 17 years, 11 months ago
      I think it’s a reflect issue as was pointed out earlier today in another thread. We’re working on a quick patch and a permanent fix for this one ...
        Ryan Thrash, MODX Co-Founder
        Follow me on Twitter at @rthrash or catch my occasional unofficial thoughts at thrash.me
        • 5091
        • 332 Posts
        chinesedream Reply #3, 17 years, 11 months ago
        Quote from: rthrash at Nov 24, 2008, 03:53 PM

        I think it’s a reflect issue as was pointed out earlier today in another thread. We’re working on a quick patch and a permanent fix for this one ...

        Thanks, Ryan. This is assuring! Can yo point me to that thread?

        Also, anyone who read this thread, please do not try open the txt files in the above url I posted, especially if you are using PC.  I posted similar question to a private list, someone told me that when she tried to look at the txt file, her virusscan software prompted her that it’s a virus.  I am on Mac, and have clicked on a couple txt files, nothing seems going wrong - yet. But I do worry if the virus spread to the mail server and when I send email via my domain address, the recipient might get the virus.


          • 25663 MODX Staff
          • 12,272 Posts
          Ryan Thrash Reply #4, 17 years, 11 months ago
          http://modxcms.com/forums/index.php/topic,30875.0.html

          Closing this down. Please see the above linked threads.
            Ryan Thrash, MODX Co-Founder
            Follow me on Twitter at @rthrash or catch my occasional unofficial thoughts at thrash.me

          This discussion is closed to further replies. Keep calm and carry on.