website hacked

[Nut-Nights]

So One of my site look like got hacked today.

Wordpress shit here

http://prntscr.com/mn16lc

Someone tell me what kind of thing it is, is it my server or just wordpress? OVH server

When i visit this page, its just a search page on my site with nothing found.

 

[jamie3000]

How outdated is your WordPress?

 

[ePrime]

From the screenshot, it doesn't look like it has been "hacked". Someone probably added random words to your search URL (wpsite.com/s?=ABCD) and indexed them on Google. No-index all "?s=" pages and disavow if any links were made to them.

 

[jamie3000]

From the screenshot, it doesn't look like it has been "hacked". Someone probably added random words to your search URL (wpsite.com/s?=ABCD) and indexed them on Google. No-index all ?s= pages and disavow if any links were made to them.

I might be wrong but I thought wordpress uses canonical tags to prevent this?

 

[Nut-Nights]

How outdated is your WordPress?

My wp is updated with latest version.

Any expert here?

 

[xhanoosh]

check your plugins or theme, might be one of them if you got one of them cracked or nulled etc..

EDIT: try wpscans DOT com might tell you if there are any security issues.

 

[legion85]

i'd try installing wordfence. it can scan all php files and might find the virus. I know I got a lot of false positives detected, thank god no viruses so far

 

[ePrime]

I might be wrong but I thought wordpress uses canonical tags to prevent this?

No, latest WP versions don't use canonical tags on search pages. I have an older version installed with Yoast SEO that shows canonical tag on search pages but these tags are different for each search string so they won't help in this case.

 

[cperformancemarketer]

Please see these factors:
Can you access your server ? If yes check your sql database if its not corrupted with anomaly data. Check if there are files apart from wordpress
If all is good access wordpress dashboard, change to default theme and shut down all plugins. Let me know what you see then. Probably then i will be able to deduce

 

[seoz87]

simply noindex search pages.

 

[Nut-Nights]

simply noindex search pages.

Already did that, but the question is if my server was compromised? how to know that its debian based server on ovh

 

[seoz87]

Already did that, but the question is if my server was compromised? how to know that its debian based server on ovh

cant really say without actually seeing the page. But from the looks of snapshot you shared, it seems @ePrime is rght. its just search pages of the website and someone has gone to lengths to either index it or make it crawl.

My first step, to be sure, is to run "screaming frog" on the site and check the outbound/external links. If you see anything that you dont remember adding then yes your site might be hacked.

Another way is to check the modifying date of wordpress files. If there are several files edited/modified on same date then its a clear sign of hacking.

If there is only search pages indexing then its not hacked.

 

[SirTop]

Most good hosting providers are very helpful in these situations.

 

[BrandingCat]

You can`t stop them as BHW can`t stop that bloody cunt with magic wodoo shit threads.

Disallow searches on sitemaps and ban the IP class,optional install Sucuri

The bad thing Google can punish you...

 

[BassTrackerBoats]

You can`t stop them as BHW can`t stop that bloody cunt with magic wodoo shit threads.

That is someone running xrumer and you would be surprised how many actually don't get through.

OP - hit up @jazzc - he is a wizard in this area and if he has time (he's busier than Santa Claus on Christmas Eve these days) he may be able to point you in the right direction.

 

[CryptoKujira]

You can beef up your security by adding iThemes Security plugin. It's free and easy to use.

But @ePrime is probably right.

 

[mhtro]

I would guess WordPress hack or the index thing which I had no idea existed.

 

[Rj268]

My was hacked like that. It was auto generating 10's of thousands of pages before I shut it down. They had me locked out of the the wordpress site so I wiped everything clean and reinstalled a backup of the site.

 

[riseofempire]

Ur site has been hacked for sure. I remember those japanese look a like text... Reeeee. What is your hosting? Dunno if this is true but I heard stories that Hosting can put those malicious shit in ur site so you will ask them to fix it and they will clean it for huge amount of money.

Ask jay yadav i remember he helped me fix a site with same issue via fb.

 

[Compazz]

wordpress sites are easily hacked if you fall for free nulled themes and nulled plugins people can take complete control of your site using shell,.htaccess and backdoors what platform is your site on?