vBulletin Mods

The Official vBulletin Modifications Site
https://www.vbulletin.org/forum/showthread.php?t=204914

Hacked - Help Needed
by Bacon Butty
10 Feb 2009 19:33

Click the "home" link and you'll see a hacked message

The forums are still viewable like....

:(

What should I do?

[Edit] Removed their message but viewable here;

http://img5.imageshack.us/img5/1594/hacked1iq7.jpg

Armageddonz 10 Feb 2009 19:38

I think this is very serious.
He probably uploaded a shell via your ftp and root your box.
Your site got defacecd, go contact your ISP and report that douche.

Bacon Butty 10 Feb 2009 19:39

Cheers but dont understand that. Why contact my ISP?

Will contact host asap though...

Armageddonz 10 Feb 2009 19:41

To get the ip logs of him.

zelnik 10 Feb 2009 19:46

Quote:

Originally Posted by Bacon Butty (Post 1740025)
www.GrandOldTeam.com/forum/

Click the "home" link and you'll see a hacked message

The forums are still viewable like....

:(

What should I do?

Check your server logs to see if it gives any indication of how it was done.

Contact your host to work out if your server was hacked their end or someone has installed a keyboard logger on your machine at home and just logged into your account with the login/password. Do you use the same password everywhere?

If you want to get the site back up and running quickly then get your password changed with the host company and just change the index to forward to your forum.

Armageddonz 10 Feb 2009 19:47

Who did you actually offend to do something so nasty to you?
Pft.
That guy should srsly spend some time in jail.

Bacon Butty 10 Feb 2009 19:50

Quote:

Originally Posted by zelnik (Post 1740042)
Check your server logs to see if it gives any indication of how it was done.

Contact your host to work out if your server was hacked their end or someone has installed a keyboard logger on your machine at home and just logged into your account with the login/password. Do you use the same password everywhere?

If you want to get the site back up and running quickly then get your password changed with the host company and just change the index to forward to your forum.

Thanks for the help, pardon my ignorance but how do I check the server logs? I can see RAW access logs in cpanel or HTTP access logs?

Armageddonz 10 Feb 2009 19:51

You have to contact your host mate.

Bacon Butty 10 Feb 2009 20:04

Quote:

Originally Posted by zelnik (Post 1740042)
Check your server logs to see if it gives any indication of how it was done.

Contact your host to work out if your server was hacked their end or someone has installed a keyboard logger on your machine at home and just logged into your account with the login/password. Do you use the same password everywhere?

If you want to get the site back up and running quickly then get your password changed with the host company and just change the index to forward to your forum.

Thanks. Followed that and its gone, for now.... :(

iBardia 11 Feb 2009 23:01

I got something like this once.


All times are GMT. The time now is 06:48.

Powered by vBulletin® Version 3.8.14
Copyright © 2020, MH Sub I, LLC dba vBulletin. All Rights Reserved. vBulletin® is a registered trademark of MH Sub I, LLC
Copyright ©2001 - , vbulletin.org. All rights reserved.