Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact us.

Post New Thread Reply

Register GFY Rules Calendar
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >
Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed.

 
Thread Tools
Old 11-27-2005, 05:11 PM   #1
abshard
Confirmed User
 
abshard's Avatar
 
Industry Role:
Join Date: Jan 2002
Location: AZ
Posts: 6,447
About my server being hacked

About my server being hacked..

It was caught within minues becuase something strange happened about a month or so ago and my host isprime was monitoring my server.

The binary file that was placed on my server was deleted pretty soon after it was placed there. My ucjcron was modified to run the uploaded binary file every 2 min becuase ucj is set by cron to run every 2 min.

The file is gone and everything is fine now..this only affected 1 of my sites.

The file was uploaded using an exploit in a bbs script i had on the server which has been removed.
abshard is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-27-2005, 05:15 PM   #2
bringer
i have man boobies
 
bringer's Avatar
 
Join Date: Jul 2003
Location: van down by the river
Posts: 13,082
whats interesting is "your" site was distributing a virus which its not longer doing. even more so is the fact that when i load the site its still loading it off a hacked cable modem from nj.
__________________
333-765-551
bringer is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-27-2005, 05:18 PM   #3
ss821z
Registered User
 
Join Date: Nov 2005
Posts: 87
Blame your host, ISPrime.
ss821z is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-27-2005, 05:19 PM   #4
abshard
Confirmed User
 
abshard's Avatar
 
Industry Role:
Join Date: Jan 2002
Location: AZ
Posts: 6,447
This happened early in the morning and was resolved shorly after that. I was just trying to find out who ran that domain from the other thread.

It looks like its ran off a bunch of cable modem user's computers. The modified ucjcron file was located on that domain in a txt file and its still currently there.

Thats why i posed the domain to see if anyone could tell me whi hosted it. I didnt mean to piss anyone off by posting the domain.

And my site is fine now, everything is back to normal.
abshard is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-27-2005, 05:20 PM   #5
abshard
Confirmed User
 
abshard's Avatar
 
Industry Role:
Join Date: Jan 2002
Location: AZ
Posts: 6,447
Quote:
Originally Posted by bringer
whats interesting is "your" site was distributing a virus which its not longer doing. even more so is the fact that when i load the site its still loading it off a hacked cable modem from nj.

My site is distributing a virus where??
abshard is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-27-2005, 05:21 PM   #6
abshard
Confirmed User
 
abshard's Avatar
 
Industry Role:
Join Date: Jan 2002
Location: AZ
Posts: 6,447
Quote:
Originally Posted by ss821z
Blame your host, ISPrime.

it was my fault for using a old version of a crappy bbs script, that i put there not my host..they caught the guy uploading the file.
abshard is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-27-2005, 05:22 PM   #7
abshard
Confirmed User
 
abshard's Avatar
 
Industry Role:
Join Date: Jan 2002
Location: AZ
Posts: 6,447
Quote:
Originally Posted by bringer
whats interesting is "your" site was distributing a virus which its not longer doing. even more so is the fact that when i load the site its still loading it off a hacked cable modem from nj.

You saw my site distributing a virus or your just assuming thats what the guy uploaded to my server?
abshard is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-27-2005, 05:23 PM   #8
pornguy
Too lazy to set a custom title
 
pornguy's Avatar
 
Industry Role:
Join Date: Mar 2003
Location: Homeless
Posts: 62,911
well glad that you got it fixed
__________________
PornGuy skype me pornguy_epic

AmateurDough The Hottes Shemales online!
TChicks.com | Angeles Cid | Mariana Cordoba | MAILERS WELCOME!
pornguy is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-27-2005, 05:26 PM   #9
justsexxx
Too lazy to set a custom title
 
Join Date: Aug 2001
Location: The Netherlands
Posts: 13,723
Quote:
Originally Posted by ss821z
Blame your host, ISPrime.
Read again smart ass...

He/she was using an old BBS thing, where users/abusers could upload crap. The host(isprime in this case) monitored that something strange waqs uploaded on a strange way, and took action within minutes....


Got it now?
__________________
Questions?

ICQ: 125184542
justsexxx is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-27-2005, 05:29 PM   #10
abshard
Confirmed User
 
abshard's Avatar
 
Industry Role:
Join Date: Jan 2002
Location: AZ
Posts: 6,447
Quote:
Originally Posted by justsexxx
Read again smart ass...

He/she was using an old BBS thing, where users/abusers could upload crap. The host(isprime in this case) monitored that something strange waqs uploaded on a strange way, and took action within minutes....


Got it now?

thanks you explained it better =)

im glad im with isprime..i have only been with them less then 1 year but i know if was was still at my old host that hacked file would still be on my server because they didnt monitor shit.
abshard is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-27-2005, 05:35 PM   #11
justsexxx
Too lazy to set a custom title
 
Join Date: Aug 2001
Location: The Netherlands
Posts: 13,723
Quote:
Originally Posted by abshard
thanks you explained it better =)

im glad im with isprime..i have only been with them less then 1 year but i know if was was still at my old host that hacked file would still be on my server because they didnt monitor shit.

Yeah isprime is one of the best hosts around. BTW thanks for the partneraccount on your sites. I still make nice sales of them

Andre
__________________
Questions?

ICQ: 125184542
justsexxx is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-27-2005, 05:36 PM   #12
Mr Pheer
Too lazy to set a custom title
 
Mr Pheer's Avatar
 
Industry Role:
Join Date: Dec 2002
Posts: 21,506
Abshard, I believe it was a guy called spunkymonkey that hacked your server. He's been around a long time.
Mr Pheer is online now   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 11-27-2005, 05:37 PM   #13
abshard
Confirmed User
 
abshard's Avatar
 
Industry Role:
Join Date: Jan 2002
Location: AZ
Posts: 6,447
Quote:
Originally Posted by bringer
whats interesting is "your" site was distributing a virus which its not longer doing. even more so is the fact that when i load the site its still loading it off a hacked cable modem from nj.

Wait a min are you trying to say that the domain i posted in the other thread was mine??
abshard is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Post New Thread Reply
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >

Bookmarks



Advertising inquiries - marketing at gfy dot com

Contact Admin - Advertise - GFY Rules - Top

©2000-, AI Media Network Inc



Powered by vBulletin
Copyright © 2000- Jelsoft Enterprises Limited.