Site has been hacked - GoFuckYourself.com

jscott · 11-14-2005, 06:24 AM

WTF!!! i had a site hacked, it links to this url:

www.black-port.org

and is hosted by some turkish company www.hostburada.com

what do i do? never had this happen to me before

i tried uploading the index.php file again, but it redirects to this site
http://secretlyx.sitemynet.com/hacked.htm

jscott · 11-14-2005, 06:25 AM

the hacked site links to www.black-port.org which has this domain info.......

Domain ID:D108016426-LROR
Domain Name:BLACK-PORT.ORG
Created On:31-Oct-2005 14:40:51 UTC
Last Updated On:10-Nov-2005 20:02:12 UTC
Expiration Date:31-Oct-2006 14:40:51 UTC
Sponsoring Registrar:Direct Information PVT Ltd. (R27-LROR)
Status:TRANSFER PROHIBITED
Registrant ID:DI_2048875
Registrant Name:Tekin Ulaskin
Registrant Organization:Black-Port
Registrant Street1:bLack mahallesi port sok no:27
Registrant Street2:
Registrant Street3:
Registrant City:Mardin
Registrant State/Province:
Registrant Postal Code:81220
Registrant Country:TR
Registrant Phone:+90.5216585
Registrant Phone Ext.:
Registrant FAX:+90.5214586
Registrant FAX Ext.:
Registrant Email:[email protected]
Admin ID:DI_2048875
Admin Name:Tekin Ulaskin
Admin Organization:Black-Port
Admin Street1:bLack mahallesi port sok no:27
Admin Street2:
Admin Street3:
Admin City:Mardin
Admin State/Province:
Admin Postal Code:81220
Admin Country:TR
Admin Phone:+90.5216585
Admin Phone Ext.:
Admin FAX:+90.5214586
Admin FAX Ext.:
Admin Email:[email protected]
Tech ID:DI_2048875
Tech Name:Tekin Ulaskin
Tech Organization:Black-Port
Tech Street1:bLack mahallesi port sok no:27
Tech Street2:
Tech Street3:
Tech City:Mardin
Tech State/Province:
Tech Postal Code:81220
Tech Country:TR
Tech Phone:+90.5216585
Tech Phone Ext.:
Tech FAX:+90.5214586
Tech FAX Ext.:
Tech Email:[email protected]
Name Server:NS1.HOSTBURADA.COM
Name Server:NS2.HOSTBURADA.COM

sonofsam · 11-14-2005, 06:25 AM

ack.. sorry to hear that man. hope you get it resolved soon

Screaming · 11-14-2005, 06:27 AM

Now that is fucked up. Your box has been rooted. Contact your hosting company ASAP.

jscott · 11-14-2005, 06:28 AM

Quote:

Originally Posted by sonofsam

ack.. sorry to hear that man. hope you get it resolved soon

thanks man, and it really sucks because the site is only a Fantasy football message board i made for my family & friends, so it doesnt make me any $$$ but it just makes me feel so fucking violated

and also makes me worry about how secure my shit really is

fucking sucks

jscott · 11-14-2005, 06:29 AM

Quote:

Originally Posted by Screaming

Now that is fucked up. Your box has been rooted. Contact your hosting company ASAP.

will do, thanks man

jscott · 11-14-2005, 06:29 AM

they title themselves "SecretlyX" i googled it and there was a shitload of links that came up

sonofsam · 11-14-2005, 06:29 AM

Quote:

Originally Posted by jscott

thanks man, and it really sucks because the site is only a Fantasy football message board i made for my family & friends, so it doesnt make me any $$$ but it just makes me feel so fucking violated

and also makes me worry about how secure my shit really is

fucking sucks

just be thankful it wasn't your main site, also get your host to look into it asap and find out exactly how your box was compromised so that they don't do the same thing to your other sites..

aico · 11-14-2005, 06:32 AM

Quote:

Originally Posted by jscott

thanks man, and it really sucks because the site is only a Fantasy football message board i made for my family & friends, so it doesnt make me any $$$ but it just makes me feel so fucking violated

and also makes me worry about how secure my shit really is

fucking sucks

If you were using PHPBB that's how they got in...

DutchTeenCash · 11-14-2005, 06:43 AM

that sucks big time

i had the same this weekend some ahole fat fingered my IP... got it back though

Anyhow : email the registrar, proof its yours somehow thatll help, lmk if you want help

The Duck · 11-14-2005, 06:44 AM

Quote:

Originally Posted by aico

If you were using PHPBB that's how they got in...

For real? Im running phpbb on one of my sites, perharps its better to change it to vbulletin?

jscott · 11-14-2005, 06:45 AM

Quote:

Originally Posted by aico

If you were using PHPBB that's how they got in...

yes i was using that on the site

jscott · 11-14-2005, 06:46 AM

Quote:

Originally Posted by thinkx

that sucks big time

i had the same this weekend some ahole fat fingered my IP... got it back though

Anyhow : email the registrar, proof its yours somehow thatll help, lmk if you want help

thanks man, contacting now

Screaming · 11-14-2005, 06:47 AM

Yes, drop phpbb like a bad habbit.

FireFoz · 11-14-2005, 06:50 AM

Yeah phpbb is really bad... you'll need to reinstall your box...

nexcom28 · 11-14-2005, 06:57 AM

Oh shit!!! My site has been hacked too.. forum

Warning, if you run phpbb check it now..

nexcom28 · 11-14-2005, 06:58 AM

*** For Islam *** LOL

ElConquistador · 11-14-2005, 08:32 AM

f'ing hackers!

mastamindz · 11-14-2005, 10:03 AM

one of my phpbb sites was hacked this week as well.

Roald · 11-14-2005, 10:31 AM

http://www.bobbi-eden.com/index.html click on "forum" same guys I guess

mikesinner · 11-14-2005, 06:27 PM

makes me wonder how secure my site is

sicone · 11-14-2005, 06:33 PM

Quote:

Originally Posted by aico

If you were using PHPBB that's how they got in...

One of my servers was hacked last Dec, thats how they got root access to it.

mrkris · 11-14-2005, 06:36 PM

Don't use shitty apps and you won't have to worry about it

OneHungLo · 11-14-2005, 07:09 PM

Who were you hosted with?

aico · 11-14-2005, 07:21 PM

Quote:

Originally Posted by kandah

For real? Im running phpbb on one of my sites, perharps its better to change it to vbulletin?

Yes, they send out bots just looking for PHPBB and then take over your box... it's got more security holes in it then the White House.

VBulletin is way better, but make sure you keep up with the updates & patches.

Spudstr · 11-14-2005, 07:21 PM

just a friendly reminder don't leave your permissions 777 for the most part and make sure /tmp has proper permissions. for god sakes simple security can go a long way. oh and don't run apache as room. MMkay?

DBS.US · 11-14-2005, 07:26 PM

(Fantasy football? doesnt make me any $$$?) Maybe if you had a porn banner on the site the hackers would give you a little respect.

pornguy · 11-14-2005, 07:27 PM

I would come down on the host hard as hell if it is their fault.

HairToStay · 11-14-2005, 07:30 PM

How many who were hacked weren't using 2.0.18?

11-14-2005, 06:24 AM	#1
jscott jscizzle Industry Role: Join Date: Feb 2001 Location: Taipei Posts: 25,198	Site has been hacked WTF!!! i had a site hacked, it links to this url: www.black-port.org and is hosted by some turkish company www.hostburada.com what do i do? never had this happen to me before i tried uploading the index.php file again, but it redirects to this site http://secretlyx.sitemynet.com/hacked.htm __________________ “If you think tough men are dangerous, wait until you see what weak men are capable of.” —Jordan B. Peterson Listen to Pomp tell why is Bitcoin important Last edited by jscott; 11-14-2005 at 06:26 AM..

11-14-2005, 06:25 AM	#2
jscott jscizzle Industry Role: Join Date: Feb 2001 Location: Taipei Posts: 25,198	the hacked site links to www.black-port.org which has this domain info....... Domain ID:D108016426-LROR Domain Name:BLACK-PORT.ORG Created On:31-Oct-2005 14:40:51 UTC Last Updated On:10-Nov-2005 20:02:12 UTC Expiration Date:31-Oct-2006 14:40:51 UTC Sponsoring Registrar:Direct Information PVT Ltd. (R27-LROR) Status:TRANSFER PROHIBITED Registrant ID:DI_2048875 Registrant Name:Tekin Ulaskin Registrant Organization:Black-Port Registrant Street1:bLack mahallesi port sok no:27 Registrant Street2: Registrant Street3: Registrant City:Mardin Registrant State/Province: Registrant Postal Code:81220 Registrant Country:TR Registrant Phone:+90.5216585 Registrant Phone Ext.: Registrant FAX:+90.5214586 Registrant FAX Ext.: Registrant Email:[email protected] Admin ID:DI_2048875 Admin Name:Tekin Ulaskin Admin Organization:Black-Port Admin Street1:bLack mahallesi port sok no:27 Admin Street2: Admin Street3: Admin City:Mardin Admin State/Province: Admin Postal Code:81220 Admin Country:TR Admin Phone:+90.5216585 Admin Phone Ext.: Admin FAX:+90.5214586 Admin FAX Ext.: Admin Email:[email protected] Tech ID:DI_2048875 Tech Name:Tekin Ulaskin Tech Organization:Black-Port Tech Street1:bLack mahallesi port sok no:27 Tech Street2: Tech Street3: Tech City:Mardin Tech State/Province: Tech Postal Code:81220 Tech Country:TR Tech Phone:+90.5216585 Tech Phone Ext.: Tech FAX:+90.5214586 Tech FAX Ext.: Tech Email:[email protected] Name Server:NS1.HOSTBURADA.COM Name Server:NS2.HOSTBURADA.COM __________________ “If you think tough men are dangerous, wait until you see what weak men are capable of.” —Jordan B. Peterson Listen to Pomp tell why is Bitcoin important

11-14-2005, 06:25 AM	#3
sonofsam Too lazy to set a custom title Join Date: Dec 2004 Location: Vancouver Posts: 18,638	ack.. sorry to hear that man. hope you get it resolved soon __________________ I like turtles.

11-14-2005, 06:27 AM	#4
Screaming I can change this!!!!! Join Date: Feb 2004 Posts: 18,972	Now that is fucked up. Your box has been rooted. Contact your hosting company ASAP. __________________

11-14-2005, 06:29 AM	#7
jscott jscizzle Industry Role: Join Date: Feb 2001 Location: Taipei Posts: 25,198	they title themselves "SecretlyX" i googled it and there was a shitload of links that came up __________________ “If you think tough men are dangerous, wait until you see what weak men are capable of.” —Jordan B. Peterson Listen to Pomp tell why is Bitcoin important

11-14-2005, 06:43 AM	#10
DutchTeenCash I like Dutch Girls Join Date: Feb 2003 Location: dutchteencash.com Posts: 21,684	that sucks big time i had the same this weekend some ahole fat fingered my IP... got it back though Anyhow : email the registrar, proof its yours somehow thatll help, lmk if you want help __________________ ICQ 16 91 547 - SKYPE dutchteencash bob AT dutchteencash DOT com ... did you see our newest Sweet Natural Girl Priscilla (18)?

11-14-2005, 06:47 AM	#14
Screaming I can change this!!!!! Join Date: Feb 2004 Posts: 18,972	Yes, drop phpbb like a bad habbit. __________________

11-14-2005, 06:50 AM	#15
FireFoz Confirmed User Join Date: Apr 2002 Posts: 480	Yeah phpbb is really bad... you'll need to reinstall your box... __________________

11-14-2005, 06:57 AM	#16
nexcom28 So Fucking Banned Join Date: Jan 2005 Posts: 3,716	Oh shit!!! My site has been hacked too.. forum Warning, if you run phpbb check it now..

11-14-2005, 06:58 AM	#17
nexcom28 So Fucking Banned Join Date: Jan 2005 Posts: 3,716	* For Islam * LOL

11-14-2005, 08:32 AM	#18
ElConquistador Confirmed User Industry Role: Join Date: Dec 2004 Location: West Coast Posts: 520	f'ing hackers!

11-14-2005, 10:03 AM	#19
mastamindz Confirmed User Join Date: Feb 2002 Location: Canada Posts: 3,547	one of my phpbb sites was hacked this week as well. __________________ If you click here, you will make money.

11-14-2005, 10:31 AM	#20
Roald SecretFriends.com Industry Role: Join Date: May 2001 Location: IMC Headquarters Posts: 27,889	http://www.bobbi-eden.com/index.html click on "forum" same guys I guess __________________ WE ARE BUYING PAY SITES! CONTACT ME ClubSweethearts \| ManUpFilms \| SinfulXXX \| HOT * AdultPrime * HOT Paying webmasters since 1996! Contact: r.riepen @ sansylgroup.com \| telegram: roaldr

11-14-2005, 06:27 PM	#21
mikesinner Confirmed User Industry Role: Join Date: Nov 2005 Posts: 5,646	makes me wonder how secure my site is __________________ My Best Sponsors MPl l Camsl CUMSHOTSl LESBIANSl FETISHl BJ RACESl TEEN BJl BSDMl VODl USE YOUR PC TO CURE CANCER

11-14-2005, 06:36 PM	#23
mrkris Confirmed User Join Date: May 2005 Posts: 2,737	Don't use shitty apps and you won't have to worry about it __________________ PHP-MySQL-Rails \| ICQ: 342500546

11-14-2005, 07:09 PM	#24
OneHungLo So Fucking Banned Industry Role: Join Date: May 2001 Location: Your mom's front hole Posts: 40,906	Who were you hosted with?

11-14-2005, 07:21 PM	#26
Spudstr Confirmed User Industry Role: Join Date: Jan 2003 Location: In a Tater Patch Posts: 2,321	just a friendly reminder don't leave your permissions 777 for the most part and make sure /tmp has proper permissions. for god sakes simple security can go a long way. oh and don't run apache as room. MMkay? __________________ Managed Hosting - Colocation - Network Services Yellow Fiber Networks icq: 19876563

11-14-2005, 07:26 PM	#27
DBS.US Geo Cities Industry Role: Join Date: Aug 2003 Location: North Captiva Island, Florida USA Posts: 11,835	(Fantasy football? doesnt make me any $$$?) Maybe if you had a porn banner on the site the hackers would give you a little respect. __________________ Make a Free Chaturbate White Label site in 34 minutes and be making money tonight

11-14-2005, 07:27 PM	#28
pornguy Too lazy to set a custom title Industry Role: Join Date: Mar 2003 Location: Homeless Posts: 62,911	I would come down on the host hard as hell if it is their fault. __________________ PornGuy skype me pornguy_epic AmateurDough The Hottes Shemales online! TChicks.com \| Angeles Cid \| Mariana Cordoba \| MAILERS WELCOME!

11-14-2005, 07:30 PM	#29
HairToStay Confirmed User Join Date: Oct 2002 Location: Southcoast, Mass. Posts: 1,521	How many who were hacked weren't using 2.0.18? __________________ Make bank by giving your surfers free pics every day and it costs you NOTHING! Use POTD Sponsors to find adult sponsors in more than 75 niches who offer a POTD feature!