PDA

View Full Version : Sorry for the downtime

Brian
11-12-2003, 10:37 AM
I'm going to make this fairly short for now. The server was shut down because it was being used to send massive volumes of spam. It turns out that at some point we were hacked. I actually talked to one of the sites that used the server to send the spam and he told me where the exploited file was. I have fixed the problem and will work over the enxt several days to secure the system even more in an attempt to keep this from happening in the future. Again I apologize for the downtime, it's been a rough 24 hours for me....



__________________
GimPin
11-12-2003, 10:41 AM
Your work in keeping this site up as well as you have it greatly appreciated
LeonZ
11-12-2003, 10:44 AM
thanks Brian
ryanman
11-12-2003, 10:48 AM
h4x0r2 suck. Thanks.
phil
11-12-2003, 10:50 AM
your time spent is apreciated. thanks brian
Brian
11-12-2003, 10:55 AM
Thank you everyone. I'll keep working to make sure it doesn't ahppen again.
exciv2000
11-12-2003, 10:56 AM
sweet, glad you found the hole and are working to secure it up. You don't own computers, they own you :)
I was beginning to get bored here at work without my HAI brotherly love!
V8SpankR
11-12-2003, 11:23 AM
I almost died of BOARDOM.:D
DrJones
11-12-2003, 12:33 PM
so what did it end up being? I'm very curious.
Brian
11-12-2003, 12:36 PM
someone hacked a vbulletin account thus gaining some passwords, they then created a username and access host for the mysql databases, then ftp'd a script to the server to allow bulk mailing. It was in an image directory. I'm in the process of securing the heck out of all of teh directories and the backend of things.
Kwando
11-12-2003, 12:41 PM
Yeah yeah... tell us the truth.











j/k Glad to see you got everything taken care of. It just shows how much time losers like me spend on HAI.
hotrod
11-12-2003, 01:37 PM
That sort of stuff makes for along day.
I thought something like that may be going on. Maybe that explains why I got blasted with nearly a hundred spam emails that day, and about 40 of them were identical.

Glad to hear they did not crap up your system too much.

Larry
Brian
11-12-2003, 01:50 PM
Things definetly could ahve been MUCH worse.
stu
11-12-2003, 02:13 PM
Do you share anything with the www.g2ic.com site? Cause they were down like the same time we were. And everytime I can't get on here for some IP address related reason, I can't get on there either.
exciv2000
11-12-2003, 05:32 PM
Hope they didn't grab my PW :eek: :)
LeonZ
11-12-2003, 05:37 PM
Hope they didn't grab my PW :eek: :)

what would they do with it? post with your username?
djet820
11-12-2003, 06:00 PM
Do you share anything with the www.g2ic.com site? Cause they were down like the same time we were. And everytime I can't get on here for some IP address related reason, I can't get on there either.

Yeah g2ic had the same problems....

But thanks for your time Brian.
Brian
11-12-2003, 06:15 PM
not affiliated with g2ic.com
gjcivic
11-12-2003, 07:04 PM
you The Man, Brian...