One of my site just got hacked

Discussion in 'Site & Server Administration' started by Imran, Aug 15, 2005.

  1. #1
    This is what message m getting:
    SPYKIDS contact: , it looks like
    home page defacement, any help please?
    This looks to be an postnuke latest exploite!
     
    Imran, Aug 15, 2005 IP
  2. J.D.

    J.D. Peon

    Messages:
    1,198
    Likes Received:
    65
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Find an alternative web server for now

    Restrict access to this machine to yourself only at the firewall level (e.g. to your IP address range)

    Investigate how they got in and what they installed

    In most cases, it is safer to reinstall everything from a backup (make sure you know when they got in and that the backup is not affected).

    J.D.
     
    J.D., Aug 15, 2005 IP
  3. soapbath

    soapbath Peon

    Messages:
    909
    Likes Received:
    45
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Imran, my advice.. don't use any CMS, ScriptKiddys are jerks, but if you do want to keep using CMS, make sure you have CHMOD right, make sure your passwords contain both Letters AND Numbers, try not to use a English word

    For example don't use:
    Cat40
    Use the following:
    A43B63
     
    soapbath, Aug 15, 2005 IP
  4. Imran

    Imran Notable Member

    Messages:
    2,340
    Likes Received:
    190
    Best Answers:
    0
    Trophy Points:
    230
    #4
    Yep Blocked IP's of most hits.
    There was no problem from the server side it was PostNuke CMs I guess ha that Exploite!
    Yes passwords are strong passwords!
    I dont know who the hell wnt to hack a free website helping people without much revenue, lol must be some people who are like selling the same softwre which I'm giving away for free with extra features!
    Thanks everything is working fine now!
     
    Imran, Aug 15, 2005 IP