About my server being hacked

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • abshard
    Confirmed User
    • Jan 2002
    • 6524

    #1

    About my server being hacked

    About my server being hacked..

    It was caught within minues becuase something strange happened about a month or so ago and my host isprime was monitoring my server.

    The binary file that was placed on my server was deleted pretty soon after it was placed there. My ucjcron was modified to run the uploaded binary file every 2 min becuase ucj is set by cron to run every 2 min.

    The file is gone and everything is fine now..this only affected 1 of my sites.

    The file was uploaded using an exploit in a bbs script i had on the server which has been removed.
  • bringer
    i have man boobies
    • Jul 2003
    • 13082

    #2
    whats interesting is "your" site was distributing a virus which its not longer doing. even more so is the fact that when i load the site its still loading it off a hacked cable modem from nj.
    333-765-551

    Comment

    • ss821z
      Registered User
      • Nov 2005
      • 87

      #3
      Blame your host, ISPrime.

      Comment

      • abshard
        Confirmed User
        • Jan 2002
        • 6524

        #4
        This happened early in the morning and was resolved shorly after that. I was just trying to find out who ran that domain from the other thread.

        It looks like its ran off a bunch of cable modem user's computers. The modified ucjcron file was located on that domain in a txt file and its still currently there.

        Thats why i posed the domain to see if anyone could tell me whi hosted it. I didnt mean to piss anyone off by posting the domain.

        And my site is fine now, everything is back to normal.

        Comment

        • abshard
          Confirmed User
          • Jan 2002
          • 6524

          #5
          Originally posted by bringer
          whats interesting is "your" site was distributing a virus which its not longer doing. even more so is the fact that when i load the site its still loading it off a hacked cable modem from nj.

          My site is distributing a virus where??

          Comment

          • abshard
            Confirmed User
            • Jan 2002
            • 6524

            #6
            Originally posted by ss821z
            Blame your host, ISPrime.

            it was my fault for using a old version of a crappy bbs script, that i put there not my host..they caught the guy uploading the file.

            Comment

            • abshard
              Confirmed User
              • Jan 2002
              • 6524

              #7
              Originally posted by bringer
              whats interesting is "your" site was distributing a virus which its not longer doing. even more so is the fact that when i load the site its still loading it off a hacked cable modem from nj.

              You saw my site distributing a virus or your just assuming thats what the guy uploaded to my server?

              Comment

              • pornguy
                Too lazy to set a custom title
                • Mar 2003
                • 62910

                #8
                well glad that you got it fixed
                PornGuy skype me pornguy_epic

                AmateurDough The Hottes Shemales online!
                TChicks.com | Angeles Cid | Mariana Cordoba | MAILERS WELCOME!

                Comment

                • justsexxx
                  Too lazy to set a custom title
                  • Aug 2001
                  • 13723

                  #9
                  Originally posted by ss821z
                  Blame your host, ISPrime.
                  Read again smart ass...

                  He/she was using an old BBS thing, where users/abusers could upload crap. The host(isprime in this case) monitored that something strange waqs uploaded on a strange way, and took action within minutes....


                  Got it now?
                  Questions?

                  ICQ: 125184542

                  Comment

                  • abshard
                    Confirmed User
                    • Jan 2002
                    • 6524

                    #10
                    Originally posted by justsexxx
                    Read again smart ass...

                    He/she was using an old BBS thing, where users/abusers could upload crap. The host(isprime in this case) monitored that something strange waqs uploaded on a strange way, and took action within minutes....


                    Got it now?

                    thanks you explained it better =)

                    im glad im with isprime..i have only been with them less then 1 year but i know if was was still at my old host that hacked file would still be on my server because they didnt monitor shit.

                    Comment

                    • justsexxx
                      Too lazy to set a custom title
                      • Aug 2001
                      • 13723

                      #11
                      Originally posted by abshard
                      thanks you explained it better =)

                      im glad im with isprime..i have only been with them less then 1 year but i know if was was still at my old host that hacked file would still be on my server because they didnt monitor shit.

                      Yeah isprime is one of the best hosts around. BTW thanks for the partneraccount on your sites. I still make nice sales of them

                      Andre
                      Questions?

                      ICQ: 125184542

                      Comment

                      • Mr Pheer
                        So Fucking Banned
                        • Dec 2002
                        • 22082

                        #12
                        Abshard, I believe it was a guy called spunkymonkey that hacked your server. He's been around a long time.

                        Comment

                        • abshard
                          Confirmed User
                          • Jan 2002
                          • 6524

                          #13
                          Originally posted by bringer
                          whats interesting is "your" site was distributing a virus which its not longer doing. even more so is the fact that when i load the site its still loading it off a hacked cable modem from nj.

                          Wait a min are you trying to say that the domain i posted in the other thread was mine??

                          Comment

                          Working...