Server Hacked! - Page 2

El Hombre · #26 02-10-2008, 10:41 AM

Well surely that cant be the solution to this problem, are they really serious?

NightRider · #27 02-10-2008, 10:42 AM

mb turn off ssh access

CT Internet · #28 02-10-2008, 10:45 AM

Well... even IF you overwrite the index files you will still end up being hacked after a few min. as there is some sort of script that does this.

Also note that .htaccess files are being deleted by the hackers.

El Hombre · #29 02-10-2008, 10:48 AM

I think someone from HG should be addressing this properly.
I am very concerned about what has been lost, when and what will be restored and what security issues are we being subjected to here.

CT Internet · #30 02-10-2008, 10:52 AM

I totally agree. No one has any information. At least let us know when the last backup was made so we know how much work was lost.

gtgeorge · #31 02-10-2008, 10:54 AM

Quote:

Originally Posted by El Hombre

I think someone from HG should be addressing this properly.
I am very concerned about what has been lost, when and what will be restored and what security issues are we being subjected to here.

Sorry, I would imagine they are quite busy trying to catch the perpetrator and/or repair and investigate the damage. No need to post info until accurate.

El Hombre · #32 02-10-2008, 10:55 AM

I was told by live chat that the last backup was made 7 days ago, i.e last Sunday

El Hombre · #33 02-10-2008, 11:00 AM

Quote:

Originally Posted by gtgeorge

No need to post info until accurate.

Sorry I have to disagree, I am not asking for chapter and verse of what they are doing, but as this is a reseller server that is hacked then many people are going to be getting some irate clients on their backs pretty soon.

It would be good to have an idea how long before they are back up, how much damage is done and how much data lost.

At least then some damage limitation can be put in place ready for when the clients start to ask the questions.

NightRider · #34 02-10-2008, 11:12 AM

They have replaced index.html All the index pages were lost.
But who had index.php now they have indexback.php with original source code. So, they can simply rename it back to index.php

El Hombre · #35 02-10-2008, 11:18 AM

Quote:

Originally Posted by NightRider

They have replaced index.html All the index pages were lost.
But who had index.php now they have indexback.php with original source code. So, they can simply rename it back to index.php

Not in my case.

Sites that have index.html still hacked and sites that had index.php also still hacked and no indexback.php

NightRider · #36 02-10-2008, 11:30 AM

E.g. http://82media.com/indexback.php
this is not my or my client`s site

El Hombre · #37 02-10-2008, 11:49 AM

The link you posted is "Server not found" and anyway I have no indexback.php pages in any of my sites.

Every site I have is still hacked. I am getting no word from support except to say the issue has been sent to security.

This has been going on for hours now and every time I check
http://www.myipneighbors.com I see no more sites coming back on line properly.

Has anyone got any updates?

NightRider · #38 02-10-2008, 11:51 AM

Now the whole server is in down...

El Hombre · #39 02-10-2008, 12:36 PM

Quote:

Originally Posted by El Hombre

I think someone from HG should be addressing this properly.
I am very concerned about what has been lost, when and what will be restored and what security issues are we being subjected to here.

Is any one from HG going to do this.

Has anyone with a hacked site had any further information from support?

NightRider · #40 02-10-2008, 12:40 PM

Your ticket has been moved to Security in order to better assist you. Someone in this department will be updating you shortly. Thank you for standing by.

GvilleRick · #41 02-10-2008, 12:41 PM

I doubt that any of the techs are going to have time to look in the forums. They are likely going through the logs and trying to figure out what happened and how. As hard as it is it would be best to let them put all their efforts into working on the problem. The quicker they can find out how it happened the better since they can then proactively prevent similar problems on other servers. With hundreds of accounts on a server it can take quite a while to research.

NightRider · #42 02-10-2008, 12:42 PM

The one thing is good - that they didnt delete all the files )))

El Hombre · #43 02-10-2008, 12:42 PM

Quote:

Originally Posted by NightRider

Your ticket has been moved to Security in order to better assist you. Someone in this department will be updating you shortly. Thank you for standing by.

Exactly the same as mine but that was ages back. I have heard nothing since.

I hope and recognise that HG staff are trying to put this right but leaving people in the dark does not increase the confidence level.

NightRider · #44 02-10-2008, 12:43 PM

It happend through SSH

GatorFord is silent spectator

***GatorDaveC*** · #45 02-10-2008, 12:46 PM

We have this all figured out, will get back to you soon.

NightRider · #46 02-10-2008, 12:48 PM

offtop

Posts: 4,294,967,295

is it joke or its real???

#47 02-10-2008, 12:49 PM

4,294,967,295 is the highest 32-bit integer you can reach, so it's obviously fake.

Sam · #48 02-10-2008, 12:50 PM

Quote:

Originally Posted by NightRider

Posts: 4,294,967,295

It's a Joke. It is very easy to modify your post count with vB

El Hombre · #49 02-10-2008, 12:51 PM

4,294,967,295 sites hacked so far today??

El Hombre · #50 02-10-2008, 12:58 PM

Quote:

Originally Posted by GvilleRick

That's how bad rumors get started. The number is the one that DaveC has listed as number of posts. They've stated that they think they have it figured out. It would be nice now to let them finish their work and post as soon as they can.

Chill out man.
I was trying to inject some humour in to what has been a frustrating day for everyone affected by this.

Rumours don't start like that unless they are taken up and made serious by people without a sense of humour.