|
| |
|
|
abbeyvet
Posts: 5095
From: Kilkenny Ireland
Status: offline
 |
Hacked - 4/10/2002 17:21:38
The home page on a site of mine was replaced this evening with a redirect page to a warez resources site. Not much else seems to have been touched, all the files etc are still there.
What can I do to prevent this happening if anything? Is it the fault of the site or the host company.?
It is an unremarkable site - for a childres charity actually. Just plain HTML mainly.
How easily is this done?
Katherine
++++++++++++++++++++++++
www.inkkdesign.com
Women and cats will do as they please. Men and dogs should relax and get used to the idea.
|
|
|
|
storm
Posts: 421
Status: offline
|
RE: Hacked - 4/10/2002 17:31:27
let the host know, check the server logs and see if there are any clues as to what security hole was exploited and of course have the host patch it or close it.
if they got your site on that host they may have got others.
let us know what happens.
storm..."Someone put forth the proposition that you can patition the lord with prayer, patition the lord with prayer, patition the lord with prayer...YOU CANNOT PATITION THE LORD WITH PRAYER"
| |
|
|
|
abbeyvet
Posts: 5095
From: Kilkenny Ireland
Status: offline
|
RE: Hacked - 4/10/2002 17:58:28
So it entirely a server issue?
I am sitting here afraid to check the other sites I have with that host. I have contacted them. Thanks.
Katherine
++++++++++++++++++++++++
www.inkkdesign.com
Women and cats will do as they please. Men and dogs should relax and get used to the idea.
| |
|
|
|
Shirley
Posts: 3126
Joined: 1/8/1999
From: Omaha, Ne USA
Status: offline
|
RE: Hacked - 4/10/2002 18:07:13
out of curiosity is it on windoze or linux/unix
Shirley
Nobody realizes that some people expend tremendous energy merely to be normal.
Money Tree Web Design
| |
|
|
|
abbeyvet
Posts: 5095
From: Kilkenny Ireland
Status: offline
|
RE: Hacked - 4/10/2002 18:14:58
Apache/1.3.22 (Unix) PHP/4.1.0 FrontPage/5.0.2.2510 on unknown.
From Netcraft.
Katherine
++++++++++++++++++++++++
www.inkkdesign.com
Women and cats will do as they please. Men and dogs should relax and get used to the idea.
| |
|
|
|
abbeyvet
Posts: 5095
From: Kilkenny Ireland
Status: offline
|
RE: Hacked - 4/10/2002 18:22:54
Strangest thing. Looking at the log files for that site, which I have not done for months, there are THOUSANDS, I mean literallly thousands of referals from this url, which is so unrelated as the be on a different planet and has no links at all to outside the site.
http://www.theoutletsathershey.com/index1a.html
I dunno. Probably unrelated but that url for an outlet store park in Pennsylvania sends more visitors to this site, a local childrens charity in Kilkenny, Ireland, that all other referrers combined. How weird is that?
Katherine
++++++++++++++++++++++++
www.inkkdesign.com
Women and cats will do as they please. Men and dogs should relax and get used to the idea.
| |
|
|
|
caywind
Posts: 1479
From: USA
Status: offline
|
RE: Hacked - 4/11/2002 14:36:41
could this be a probe...portscan...
quote:
Strangest thing. Looking at the log files for that site, which I have not done for months, there are THOUSANDS, I mean literallly thousands of referals from this url, which is so unrelated as the be on a different planet and has no links at all to outside the site.
http://www.theoutletsathershey.com/index1a.html
I'm thinking that maybe there is a store there that has a system that is accessed by an employee, who then uses that to try to gain access to servers...
<spellcheck> </spellcheck>
| |
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts
|
|
|
Printable Version 
but I know there was recently a whole bunch of Linux and Apache module security updates. Many plugged holes that would allow root access to the server after some buffer overruns etc. 
