Recently we had an issue with our magento site. When we try to access the site using URL or using the IP it was redirecting an IP called testp1.piwo.pila.pl

The admin panel was also inaccessible. Anyone faced this issue before?

  • please make sure, you installed all latest security patches in site. – Baby in Magento Feb 27 '16 at 10:24
  • Try to place a backup or an earlier version from version control on a different server to see if it redirects – Sander Mangel Feb 27 '16 at 11:14

You should first try to recover your site.

I suggest that you check your db for secure and unsecure urls with this query:

select * from core_config_data where path like '%secure%';

And change back the urls, you should also check for changes in your code in your servers, read here: https://magento.stackexchange.com/a/101288/5913. (this will help you identify changes in Magrento Core). For your own modules use your VCS.

You can check your site to see which security patches are installed using this: https://www.magereport.com/

Once you have gained access to your system again you should check for new admin accounts, or remove all accounts and create new ones. Make sure you apply the security patches, and that you remove the files that were changed if any. Also you should check for changes in your cms blocks, cms pages, etc, check this link for that: https://blog.sucuri.net/2015/10/massive-magento-guruincsite-infection.html

Good luck

  • Thanks a lot for the reply. The site is running now. I can access the admin. Clearing the contents of cache folder resolved the issue. However i'm not sure why or how this happened. I will install the latest security patches. – nikhil Feb 27 '16 at 15:30
  • Great. Make sure you check your code for changes. If this helped you please consider accepting the answer – lloiacono Feb 27 '16 at 17:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.