Ever Been Hacked? Just happened to me :/ - GoFuckYourself.com

Majestic · 03-23-2010, 10:39 PM

Fucker from Georgia bruteforced me and deleted all my accounts on my whm and backups :/. I had 3 adult sites and 4 product sites and alot of random sites. Also had my school final was on that server that's due later this week. How do you biggerboys deal with this shit?

papill0n · 03-23-2010, 10:40 PM

I would contact my host immediately.

CYF · 03-23-2010, 10:44 PM

Quote:

Originally Posted by Majestic

Fucker from Georgia bruteforced me and deleted all my accounts on my whm and backups :/. I had 3 adult sites and 4 product sites and alot of random sites. Also had my school final was on that server that's due later this week. How do you biggerboys deal with this shit?

that sucks man.

Didn't you have offsite backups? Maybe your host has a backup?

Majestic · 03-23-2010, 10:47 PM

Quote:

Originally Posted by CYF

that sucks man.

Didn't you have offsite backups? Maybe your host has a backup?

No didn't have offsite backup. I talked to my hosting and everything

. Shit sucks, gonna be working on all my sites for spring break instead of going to the beach and getting fucked up

TeenCat · 03-23-2010, 10:49 PM

bruteforced? man then i am sorry to say but lesson learned. also deleted server and also backup ... another lesson learned, do not put the same password on important places. welcome to the internet

CYF · 03-23-2010, 10:50 PM

Quote:

Originally Posted by Majestic

No didn't have offsite backup. I talked to my hosting and everything

. Shit sucks, gonna be working on all my sites for spring break instead of going to the beach and getting fucked up

myabe archive.org has a copy? Or google cache?

hopefully you have files on your computer, or can get images from the designer? etc?

Majestic · 03-23-2010, 10:53 PM

Quote:

Originally Posted by TeenCat

bruteforced? man then i am sorry to say but lesson learned. also deleted server and also backup ... another lesson learned, do not put the same password on important places. welcome to the internet

Yeah man! I use same password for all my cpanels too :/. Lesson learned indeed

TeenCat · 03-23-2010, 10:56 PM

another thing is, if you are bruteforced, it is targetted attack, so someone have been looking for datas, or it was a reaction for something. if he will be looking for data, he will leave server as it is. server deleted means it was reaction for something. or there is new hackers "timewasters"

Jakez · 03-23-2010, 10:56 PM

Blows. Been there more than once. Just tell your teacher a hacker ate it? lol

Do you have cPanel? Either way I'm sure your hosting has some kind of backup method, you have to make sure you download a regular backup. Any time I make a major update or just do anything on my hosting that I wouldn't want to have to do again, I make sure I create and download a backup.

I leave the latest 1-2 backup files in my main hosting directory, I also keep the latest 2-3 backups on an external hard drive, and at least a couple of the latest ones on the main hard drive for my laptop. Just in case any of them are corrupted.

Edit: as suggested, check archive.org, you might not get everything you want but that site has saved my ass a lot of time more than once.

Majestic · 03-23-2010, 11:12 PM

Yea it was cPanel :/

free seo · 03-23-2010, 11:15 PM

Quote:

Originally Posted by Majestic

How do you biggerboys deal with this shit?

By avoiding shitty hosts.

HandballJim · 03-23-2010, 11:17 PM

I work on my websites on my computer...and then upload the files to my host...so I always have a copy. It takes longer to update though. I also burn copies or transfer my webs folder to scan drive. good luck

Majestic · 03-23-2010, 11:22 PM

Quote:

Originally Posted by free seo

By avoiding shitty hosts.

:/ I will get a dedicated once I learn how to manage everything myself. I'm very noob to this hosting and server stuff

FrozenJag · 03-23-2010, 11:26 PM

Quote:

Originally Posted by Majestic

:/ I will get a dedicated once I learn how to manage everything myself. I'm very noob to this hosting and server stuff

Which is even more reason to get a good server with a host that offers full management.

Stick to what you are good at and what makes you money. Leave the hosts and server techs to handle that part of your business. Your not utilizing your time right as it is and now its even gotten worse.

Just my

Sorry to hear about this though. :\

free seo · 03-23-2010, 11:35 PM

Quote:

Originally Posted by Majestic

:/ I will get a dedicated once I learn how to manage everything myself. I'm very noob to this hosting and server stuff

No, if you manage yourself you're gonna get owned again.

Go with a good company that offers full management.

Grisey · 03-24-2010, 01:32 AM

Before i moved to natnet i was hacked badly lost about 70% of my income from my traffic sites because of it, never seemed to recover after that. Natnet helped me sort my sites out and get them back in working order but never had the same sales/traffic again.

Natnet rocks

ladida · 03-24-2010, 03:38 AM

Quote:

Originally Posted by free seo

No, if you manage yourself you're gonna get owned again.

Go with a good company that offers full management.

This has no relevance to someone getting hacked. I know only of one company that can say this. If i told you to name them, i'm pretty sure you'd be wrong.

Klen · 03-24-2010, 07:22 AM

Well i dont do backup on my servers,but again my servers are well secured since i dont use insecure shit like whm and apache.

TurboAngel · 03-24-2010, 07:26 AM

Quote:

Originally Posted by Majestic

:/ I will get a dedicated once I learn how to manage everything myself. I'm very noob to this hosting and server stuff

When you want the BEST go with NatNet, I had all my domains stolen so I moved to NatNet and I know 100% that will not happen again.

BestXXXPorn · 03-24-2010, 07:38 AM

You should never be brute forced....

I would take steps to secure your own boxes. To protect against brute force on a server level, if you're running *nix... I recommend R-fx Network's free:

http://www.rfxn.com/projects/

APF (Advanced Policy Firewall)
BFD (Brute Force Detection)

Installs in minutes with good install files to help you get it done

Anyone with basic *nix skills can do this in a matter of minutes.

CIVMatt · 03-24-2010, 07:44 AM

passwords usually dont matter... I had my whole box and all sites hacked by a Palestinian group over a year ago, rewrote all my sites with anti Israel stuff and dead babies

halfpint · 03-24-2010, 07:49 AM

yep Iv been hacked as people on here already know..Always keep a hard backup of everything on a computer cause it dosent matter how secure you think your shit is, there is always a way round it.

cyco_cc · 03-24-2010, 07:52 AM

Always, always, always keep offsite backups. Just get a (couple) external HDs which serve no other purpose but to backup your sites. Data is another thing but if your data isn't changing very often, DB backups of 2-3 weeks is usually fine. In the worst case, you lose some data but not the entire site.

raymor · 03-24-2010, 12:31 PM

Quote:

Originally Posted by CYF

that sucks man.

Didn't you have offsite backups? Maybe your host has a backup?

$6 for top of the line offsite backup in a highly secure data center - we're even getting ready to
open the second facility in the underground nuclear bunker:
https://www.bettercgi.com/clonebox/

Klen · 03-24-2010, 12:40 PM

Quote:

Originally Posted by BestXXXPorn

You should never be brute forced....

I would take steps to secure your own boxes. To protect against brute force on a server level, if you're running *nix... I recommend R-fx Network's free:

http://www.rfxn.com/projects/

APF (Advanced Policy Firewall)
BFD (Brute Force Detection)

Installs in minutes with good install files to help you get it done

Anyone with basic *nix skills can do this in a matter of minutes.

I actually use CSF/LDF combo which also prevent scanning and hacker attempts plus stop bots and ddoss attacks,but csf sometime goes wild and can either block your own ip from accessing or even total server traffic.

Dirty Lord · 03-24-2010, 12:44 PM

oh dude....its really awful been deleted

Majestic · 03-24-2010, 01:13 PM

Thanks everyone. Yea I really learned my lesson and now I'm gonna get a couple of EHD's >_>

tiger · 03-24-2010, 01:57 PM

WHM has a bruteforce detector built in. Also you should do manual backups to your pc and off site backups as well. Other then that just make sure you aren't running insecure scripts or using crappy passwords and you will be fine most of the time.

Spudstr · 03-24-2010, 02:17 PM

Quote:

Originally Posted by tiger

WHM has a bruteforce detector built in. Also you should do manual backups to your pc and off site backups as well. Other then that just make sure you aren't running insecure scripts or using crappy passwords and you will be fine most of the time.

that detector is disabled by default.

V_RocKs · 03-24-2010, 05:31 PM

Hmm.. clonebox looks interesting!

st0ned · 03-24-2010, 05:37 PM

Quote:

Originally Posted by V_RocKs

Hmm.. clonebox looks interesting!

Agreed. Anyone using it currently?

StrokeKing · 03-24-2010, 05:43 PM

i haven't experience being hack. but i know it is really an awful experience. it is necessary to have backup at all time.

The Porn Nerd · 03-24-2010, 06:34 PM

Random post

directfiesta · 03-24-2010, 09:25 PM

Quote:

Originally Posted by free seo

By avoiding shitty hosts.

- Firewall ( like http://configserver.com/cp/csf.html )
- Change your ssh port from 22 to any other thing ( reduces the attempts )
- change the default login name of WHM from " root " to " gtdsiOph " or similar .. ( after all, why give away the first half of the login )
- use a unique root password meaning nothing : random upper - lower cases with numerical and characters . Change it every 30 days
- do the same for Cpanel/Ftp
- Configure your backup drive to unmount once the backup is done ( prevents the b.u. to be wiped ).
- check logs for some nasty shell scripts such as r99 and c57 . Check for root kits.
- Check your PC for trojan ( sniffers, keylogger, etc ..)

and so on .

dickjay · 03-24-2010, 09:32 PM

bad host sounds like

amvcdotcom · 03-24-2010, 09:36 PM

a bit odd that you also just posted this: http://www.gfy.com/webmaster-q-and-fuckin-a/959148-hosting.html

Joshua G · 03-24-2010, 10:13 PM

Quote:

Originally Posted by amvcdotcom

a bit odd that you also just posted this: http://www.gfy.com/webmaster-q-and-fuckin-a/959148-hosting.html

oh shit!

plsureking · 03-24-2010, 11:26 PM

Quote:

Originally Posted by amvcdotcom

a bit odd that you also just posted this: http://www.gfy.com/webmaster-q-and-fuckin-a/959148-hosting.html

those "i need hosting" threads should be moved to a spam section. same salesmen whores post the same thing every time. they probably just watch for those threads. anyone posting a new "i need hosting" thread is just too lazy to use SEARCH and should be banned.

regarding hacks, u are better off not using a cp. just configure a server manually. then they have to hack ssh to make a change. not impossible but adds difficulty. nothing is hackproof tho.

Sabby · 03-25-2010, 12:37 AM

People are such dicks.

Sabby

Sabby · 03-25-2010, 12:40 AM

my server is pretty secure i hope and i dont have much on it anyway that cant be replaced.

Most annoying fuckers I have had lately is having my yahoo msgr hacked. Found a program to cure it.

Bowing to the programer GODS...

Sabby

raven1083 · 03-25-2010, 12:46 AM

dude, too sorry to hear that

johnnyloadproductions · 03-25-2010, 01:16 AM

I love the fact that I'm in school for computer science/engineering, it all pays off.

Sabby · 03-25-2010, 01:20 AM

Quote:

Originally Posted by johnnyloadproductions

I love the fact that I'm in school for computer science/engineering, it all pays off.

i have a great story... brb.

Sabby

bbobby86 · 03-25-2010, 03:50 AM

what a signature papill0n...

raymor · 03-25-2010, 10:15 AM

Quote:

Originally Posted by FrozenJag

Which is even more reason to get a good server with a host that offers full management.

Stick to what you are good at and what makes you money. Leave the hosts and server techs to handle that part of your business. Your not utilizing your time right as it is and now its even gotten worse.

Just my

Sorry to hear about this though. :\

Absolutely. I'm a big do it yourself person - I do my own car repairs, including replacing
engines, and all kinds of other DIY. Server admin, particularly when it comes to security, is
NOT a good place for DIY, though, not if the server is for your business.

We regularly have to educate hosts about what we consider to be fairly basic server admin.
Even those who have been doing it professionally for years have a LOT still to learn. It's NOT
something to learn a little bit in your spare time and do it yourself.

03-23-2010, 10:39 PM	#1
Majestic Registered User Join Date: Mar 2010 Posts: 93	Ever Been Hacked? Just happened to me :/ Fucker from Georgia bruteforced me and deleted all my accounts on my whm and backups :/. I had 3 adult sites and 4 product sites and alot of random sites. Also had my school final was on that server that's due later this week. How do you biggerboys deal with this shit?

03-23-2010, 10:49 PM	#5
TeenCat Too lazy to set a koala Industry Role: Join Date: Jan 2007 Location: CZ/EU forever! Posts: 16,139	bruteforced? man then i am sorry to say but lesson learned. also deleted server and also backup ... another lesson learned, do not put the same password on important places. welcome to the internet __________________ 6bot / Coming again very soon! Svit Zlin Radio 24/7!

03-23-2010, 10:56 PM	#8
TeenCat Too lazy to set a koala Industry Role: Join Date: Jan 2007 Location: CZ/EU forever! Posts: 16,139	another thing is, if you are bruteforced, it is targetted attack, so someone have been looking for datas, or it was a reaction for something. if he will be looking for data, he will leave server as it is. server deleted means it was reaction for something. or there is new hackers "timewasters" __________________ 6bot / Coming again very soon! Svit Zlin Radio 24/7!

03-23-2010, 10:56 PM	#9
Jakez Confirmed User Industry Role: Join Date: Jan 2004 Location: oddfuturewolfgangkillthemall!!!!!!! Posts: 5,656	Blows. Been there more than once. Just tell your teacher a hacker ate it? lol Do you have cPanel? Either way I'm sure your hosting has some kind of backup method, you have to make sure you download a regular backup. Any time I make a major update or just do anything on my hosting that I wouldn't want to have to do again, I make sure I create and download a backup. I leave the latest 1-2 backup files in my main hosting directory, I also keep the latest 2-3 backups on an external hard drive, and at least a couple of the latest ones on the main hard drive for my laptop. Just in case any of them are corrupted. Edit: as suggested, check archive.org, you might not get everything you want but that site has saved my ass a lot of time more than once. __________________ [email protected] - jakezdumb - 573689400 Killuminati Last edited by Jakez; 03-23-2010 at 10:58 PM..

03-23-2010, 11:17 PM	#12
HandballJim Confirmed User Industry Role: Join Date: Sep 2008 Location: NYC Posts: 4,024	I work on my websites on my computer...and then upload the files to my host...so I always have a copy. It takes longer to update though. I also burn copies or transfer my webs folder to scan drive. good luck __________________ HOW I MAKE LOTS OF $$$

03-23-2010, 10:40 PM	#2
papill0n Unregistered Abuser Industry Role: Join Date: Oct 2007 Posts: 15,547	I would contact my host immediately.

03-23-2010, 11:12 PM	#10
Majestic Registered User Join Date: Mar 2010 Posts: 93	Yea it was cPanel :/

03-24-2010, 01:32 AM	#16
Grisey Confirmed User Join Date: Jan 2004 Location: Uk Posts: 1,805	Before i moved to natnet i was hacked badly lost about 70% of my income from my traffic sites because of it, never seemed to recover after that. Natnet helped me sort my sites out and get them back in working order but never had the same sales/traffic again. Natnet rocks __________________ Segpay Suck Ass Worse Billing Company Allurecash Scammers and don't pay

03-24-2010, 07:22 AM	#18
Klen Industry Role: Join Date: Aug 2006 Location: Little Vienna Posts: 32,235	Well i dont do backup on my servers,but again my servers are well secured since i dont use insecure shit like whm and apache.

03-24-2010, 07:38 AM	#20
BestXXXPorn Confirmed User Join Date: Jun 2009 Location: Asheville, NC Posts: 2,277	You should never be brute forced.... I would take steps to secure your own boxes. To protect against brute force on a server level, if you're running nix... I recommend R-fx Network's free: http://www.rfxn.com/projects/ APF (Advanced Policy Firewall) BFD (Brute Force Detection) Installs in minutes with good install files to help you get it done Anyone with basic nix skills can do this in a matter of minutes. __________________ ICQ: 258-202-811 \| Email: eric{at}bestxxxporn.com

03-24-2010, 07:44 AM	#21
CIVMatt Amateur Pimpin Industry Role: Join Date: Aug 2004 Location: Orlando, FL Posts: 13,075	passwords usually dont matter... I had my whole box and all sites hacked by a Palestinian group over a year ago, rewrote all my sites with anti Israel stuff and dead babies __________________ Make easy money with Webcams

03-24-2010, 07:49 AM	#22
halfpint GFY's Halfpint Industry Role: Join Date: Jun 2007 Location: UK Posts: 15,223	yep Iv been hacked as people on here already know..Always keep a hard backup of everything on a computer cause it dosent matter how secure you think your shit is, there is always a way round it. __________________ Get FREE website listings on Cryptocoinshops.net

03-24-2010, 07:52 AM	#23
cyco_cc Confirmed User Join Date: Oct 2008 Posts: 344	Always, always, always keep offsite backups. Just get a (couple) external HDs which serve no other purpose but to backup your sites. Data is another thing but if your data isn't changing very often, DB backups of 2-3 weeks is usually fine. In the worst case, you lose some data but not the entire site.

03-24-2010, 12:44 PM	#26
Dirty Lord Confirmed User Join Date: Nov 2007 Posts: 2,681	oh dude....its really awful been deleted __________________

03-24-2010, 01:13 PM	#27
Majestic Registered User Join Date: Mar 2010 Posts: 93	Thanks everyone. Yea I really learned my lesson and now I'm gonna get a couple of EHD's >_>

03-24-2010, 01:57 PM	#28
tiger Confirmed User Industry Role: Join Date: Apr 2002 Location: Los Angeles Posts: 6,986	WHM has a bruteforce detector built in. Also you should do manual backups to your pc and off site backups as well. Other then that just make sure you aren't running insecure scripts or using crappy passwords and you will be fine most of the time. __________________

03-24-2010, 05:31 PM	#30
V_RocKs Damn Right I Kiss Ass! Industry Role: Join Date: Dec 2003 Location: Cowtown, USA Posts: 32,391	Hmm.. clonebox looks interesting!

03-24-2010, 05:43 PM	#32
StrokeKing Confirmed User Join Date: May 2008 Posts: 232	i haven't experience being hack. but i know it is really an awful experience. it is necessary to have backup at all time. __________________ Adult Reviews by the Stroke King.

03-24-2010, 06:34 PM	#33
The Porn Nerd Living The Dream Industry Role: Join Date: Jun 2009 Location: Inside a Monitor Posts: 19,496	Random post __________________ My Affiliate Programs: Porn Nerd Cash \| Porn Showcase \| Aggressive Gold Over 90 paysites to promote! Skype: peabodymedia

03-24-2010, 09:32 PM	#35
dickjay So Fucking Banned Join Date: Mar 2010 Posts: 30	bad host sounds like

03-24-2010, 09:36 PM	#36
amvcdotcom i like kitties. Industry Role: Join Date: Jan 2004 Location: Seattle & NC Posts: 886	a bit odd that you also just posted this: http://www.gfy.com/webmaster-q-and-fuckin-a/959148-hosting.html __________________ Email only: allen at/ amvc dotcom

03-25-2010, 12:37 AM	#39
Sabby Confirmed User Industry Role: Join Date: Jul 2003 Posts: 2,888	People are such dicks. Sabby __________________ Fuck off

03-25-2010, 12:40 AM	#40
Sabby Confirmed User Industry Role: Join Date: Jul 2003 Posts: 2,888	my server is pretty secure i hope and i dont have much on it anyway that cant be replaced. Most annoying fuckers I have had lately is having my yahoo msgr hacked. Found a program to cure it. Bowing to the programer GODS... Sabby __________________ Fuck off Last edited by Sabby; 03-25-2010 at 12:42 AM..

03-25-2010, 12:46 AM	#41
raven1083 Confirmed User Join Date: Jul 2007 Posts: 7,687	dude, too sorry to hear that __________________ Femdom Stories \| Bound BBW Blog and Videos \|Bondage Sex Videos and Pictures Hardcore Japanese Bondage \| BDSM Movies And Galleries Mistress Cuckold CBT

03-25-2010, 01:16 AM	#42
johnnyloadproductions Account Shutdown Industry Role: Join Date: Oct 2008 Location: Gone Posts: 3,611	. I love the fact that I'm in school for computer science/engineering, it all pays off.

03-25-2010, 03:50 AM	#44
bbobby86 partners.sexier.com Industry Role: Join Date: Jan 2007 Location: San Francisco, CA Posts: 11,926	what a signature papill0n... __________________