NamePros
Welcome, Guest! Ready to make a name for yourself in the domain business? We welcome both the hobbyist and professional domainer to join the discussion as part of the NamePros community.

Click here to create your profile to start earning reputation for posting, and trader ratings for buying & selling in our free e-marketplace. Build your trader rating with each successful sale. Our system has tracked over 100,000 sales and counting!
FAQ & TOS Register Search Today's Posts Mark Forums Read

Go Back   NamePros.com > Domain Name Discussion Forums > Domain Names > Domain Newbies
Reload this Page My sites keep getting hacked

Domain Newbies New to domain names? Have your questions answered here.

Advanced Search


Closed Thread
 
LinkBack Thread Tools
Old 07-11-2006, 10:48 PM THREAD STARTER               #1 (permalink)
NamePros Regular
Join Date: Jun 2005
Location: Michigan
Posts: 613
combs84 is just really nicecombs84 is just really nicecombs84 is just really nicecombs84 is just really nice
 



My sites keep getting hacked


I left this one up:
http://sportslogs.com

Why is this happening and what precautions can be takin so it doesn't happen again? So far i've just uploaded the index file back over it from my local drive. but this one i was unable to save.

Nobody knows my passwords or anything...any ideas?
combs84 is offline  
Old 07-11-2006, 11:16 PM   #2 (permalink)
NamePros Regular
 
franchise's Avatar
Join Date: May 2006
Posts: 452
franchise has a spectacular aura aboutfranchise has a spectacular aura about
 


Ethan Allen Fund
where are the sites hosted? Did you contact your host and what did they have to say about the problem?
That could shed some light on things....
franchise is offline  
Old 07-11-2006, 11:34 PM   #3 (permalink)
NamePros Member
Join Date: Jul 2006
Location: Gardendale, Texas
Posts: 48
Zhang is an unknown quantity at this point
 



Whoever your hosting company is should be able to help you track and fix this, if they are unable to help, you need to switch companies. At the very least, they should be able to go into the server and reset your website with a clean slate. They should also be able to get the IP of the hacker and block them from their servers because they should be logging all IP addresses that come and go.
Zhang is offline  
Old 07-11-2006, 11:54 PM THREAD STARTER               #4 (permalink)
NamePros Regular
Join Date: Jun 2005
Location: Michigan
Posts: 613
combs84 is just really nicecombs84 is just really nicecombs84 is just really nicecombs84 is just really nice
 



OK Thanks, I guess I will contact them tomorrow. I use 1and1...I know they are horrible with domains and whatnot..and have horrible support but I got locked in with them buying a ton of domains with them before I had known that. So i've got about 100 domains with them so moving them really isn't an option.

I will try and see what they can do in regards to the IP and blocking them though.
combs84 is offline  
Old 07-12-2006, 03:50 AM   #5 (permalink)
NamePros Member
Join Date: May 2006
Posts: 133
spacetrain will become famous soon enoughspacetrain will become famous soon enough
 



Meh well i hate hackers, so i reported there domain to there registrar and internic for invalid data then reported there site to there hosts.
spacetrain is offline  
Old 07-12-2006, 01:31 PM THREAD STARTER               #6 (permalink)
NamePros Regular
Join Date: Jun 2005
Location: Michigan
Posts: 613
combs84 is just really nicecombs84 is just really nicecombs84 is just really nicecombs84 is just really nice
 



Originally Posted by spacetrain
Meh well i hate hackers, so i reported there domain to there registrar and internic for invalid data then reported there site to there hosts.
Thanks . Yea I really don't see why they need to get their kicks by trying to hurt my sites and business .
combs84 is offline  
Old 07-12-2006, 01:41 PM   #7 (permalink)
NamePros Regular
 
fried-chicken's Avatar
Join Date: Mar 2006
Location: Wigan, UK
Posts: 522
fried-chicken will become famous soon enough
 




no way!!!

im really, really mad for you. they are scum!!!!!!!

stuff like this make my angry.
__________________
Wigan Web Design | Watches UK | Canvas Pop Art
fried-chicken is offline  
Old 07-12-2006, 01:47 PM   #8 (permalink)
Senior Member
 
Phronesis's Avatar
Join Date: Feb 2006
Posts: 1,777
Phronesis is a name known to allPhronesis is a name known to allPhronesis is a name known to allPhronesis is a name known to allPhronesis is a name known to allPhronesis is a name known to all
 



Wow....losers in Romania with nothing to do. They need to get a life.
Phronesis is offline  
Old 07-12-2006, 02:34 PM   #9 (permalink)
Senior Member
 
lpxxfaintxx's Avatar
Join Date: May 2006
Location: Irvine, CA
Posts: 1,082
lpxxfaintxx is just really nicelpxxfaintxx is just really nicelpxxfaintxx is just really nicelpxxfaintxx is just really nice
 



Hey, I think Romania are white-hat hackers, trying to help you. If they could hack you, then obviously others can too. That is why they did! So that you would be aware of this, and so that you can fix it. I know it may be frustrating, but if you plan on making this site last really long, it will be beneficial. Anyone agree with me?
lpxxfaintxx is offline  
Old 07-12-2006, 02:43 PM   #10 (permalink)
NamePros Member
Join Date: Jun 2006
Posts: 32
Linkery is an unknown quantity at this point
 



Originally Posted by lpxxfaintxx
Hey, I think Romania are white-hat hackers, trying to help you. If they could hack you, then obviously others can too. That is why they did! So that you would be aware of this, and so that you can fix it. I know it may be frustrating, but if you plan on making this site last really long, it will be beneficial. Anyone agree with me?
I don't agree AT ALL...if you wanted someone to try to hack your site, you should hire a firm to do it and report back on what you can fix. If you didn't want this, its illegal, plain and simple no matter how you look at it. Hacking someone's personal property (a website IS in essence virtual personal property), in my book and the eyes of the law, is equivalent to breaking and entering with intent to cause hardship and damage and/or fraud. Its criminal. No ifs, ands or buts. I have a law enforcement background and would LOVE to meet some of these "hacker" people face to face.
????: NamePros.com http://www.namepros.com/domain-newbies/216074-my-sites-keep-getting-hacked.html

You may call this a rant, but I'd like to find these kind of people and bring them down. I was once a victim myself, but now I don't hesitate to report any suspicious activity. Don't waste a minute, report them ASAP.
Last edited by Linkery; 07-12-2006 at 02:47 PM.
Linkery is offline  
Old 07-12-2006, 02:54 PM   #11 (permalink)
Senior Member
 
danstevenson's Avatar
Join Date: Jan 2005
Location: Calgary
Posts: 1,357
danstevenson is a name known to alldanstevenson is a name known to alldanstevenson is a name known to alldanstevenson is a name known to alldanstevenson is a name known to alldanstevenson is a name known to alldanstevenson is a name known to alldanstevenson is a name known to all
 



i had someone do something that this to one of my .ca domains cira phoned me like 2 seconds later told me about my site getting hacked and i fixed it then i just reported them and never happened again
danstevenson is offline  
Old 07-12-2006, 05:56 PM THREAD STARTER               #12 (permalink)
NamePros Regular
Join Date: Jun 2005
Location: Michigan
Posts: 613
combs84 is just really nicecombs84 is just really nicecombs84 is just really nicecombs84 is just really nice
 



Originally Posted by lpxxfaintxx
Hey, I think Romania are white-hat hackers, trying to help you. If they could hack you, then obviously others can too. That is why they did! So that you would be aware of this, and so that you can fix it. I know it may be frustrating, but if you plan on making this site last really long, it will be beneficial. Anyone agree with me?
yea I can't agree with you either. Hacking me to show me that other people can hack me really makes no sense. If I didn't have everything on my local disk it would have all been gone...as the one site I posted was.
????: NamePros.com http://www.namepros.com/showthread.php?t=216074

Hopefully they stop messing with my stuff though, it's not fun.
combs84 is offline  
Old 07-12-2006, 06:47 PM   #13 (permalink)
NamePros Regular
Join Date: May 2005
Location: Oklahoma City Oklahoma
Posts: 467
shanee86 is on a distinguished road
 



Yea hackers suck or bad ones do I know some that are good and work for firms to keep bad ones out. Bur yea we also had one or our servers hacked because of a upload script someone had our server. We had our server admin fix it. I really hate bad hackers fell for you man.
shanee86 is offline  
Old 07-12-2006, 07:35 PM   #14 (permalink)
NamePros Expert
Join Date: Oct 2004
Location: South Carolina
Posts: 5,050
SimpleMan has a reputation beyond reputeSimpleMan has a reputation beyond reputeSimpleMan has a reputation beyond reputeSimpleMan has a reputation beyond reputeSimpleMan has a reputation beyond reputeSimpleMan has a reputation beyond reputeSimpleMan has a reputation beyond reputeSimpleMan has a reputation beyond reputeSimpleMan has a reputation beyond reputeSimpleMan has a reputation beyond reputeSimpleMan has a reputation beyond repute
 


Help The Homeless - Holiday 2009 Help The Homeless - Holiday 2009 Help The Homeless - Holiday 2009 Help The Homeless - Holiday 2009
It's between you and your host at this point. They should be able to tell you where they are getting in, otherwise it's time for you to move. I say this from experience in the industry.
SimpleMan is offline  
Old 07-13-2006, 08:34 AM   #15 (permalink)
NamePros Regular
 
MyPGP's Avatar
Join Date: Jun 2006
Location: Quincy
Posts: 266
MyPGP is an unknown quantity at this point
 



DIYWebserver.Com
__________________
Me | Arpegg.io | "Why have a Dot Com when all you need is a DOT?
MyPGP is offline  
Old 07-13-2006, 08:46 AM   #16 (permalink)
NamePros Member
 
Osprey's Avatar
Join Date: Mar 2006
Posts: 63
Osprey is an unknown quantity at this point
 



It could also be a weakness in any software you were using on the site.

It's true that some people hack sites to highlight security exploits etc. - It doesn't mean it's right, but it doesn't mean it's not their excuse for doing it
__________________
Latest Site: Blogoculars - Add your blog now! (Free)
Osprey is offline  
Old 07-13-2006, 10:30 AM   #17 (permalink)
I'll do it
 
-Nick-'s Avatar
Join Date: Dec 2005
Location: India
Posts: 6,927
-Nick- Has achieved greatness-Nick- Has achieved greatness-Nick- Has achieved greatness-Nick- Has achieved greatness-Nick- Has achieved greatness-Nick- Has achieved greatness-Nick- Has achieved greatness-Nick- Has achieved greatness-Nick- Has achieved greatness-Nick- Has achieved greatness-Nick- Has achieved greatness
 


Member of the Month
September 2007
Adoption
Man again I clicked on your website and there is another banner over there. Hackers are even hacking that banner pages themselves to prove who is hacking it.
-Nick- is offline  
Old 07-21-2006, 02:27 AM   #18 (permalink)
NamePros Member
Join Date: May 2006
Location: UK
Posts: 99
Treacle is on a distinguished road
 



I know exactly how you feel about the hacking. I have just been told that the hosting company that I use has been hacked completely and even the backups have gone! I'm moving host toute suite but would appreciate any security guidance that people have.

Thanks
Treacle is offline  
Old 07-21-2006, 07:45 PM   #19 (permalink)
Senior Member
Join Date: Sep 2005
Location: In Free Fall
Posts: 1,123
TestCase is a splendid one to beholdTestCase is a splendid one to beholdTestCase is a splendid one to beholdTestCase is a splendid one to beholdTestCase is a splendid one to beholdTestCase is a splendid one to beholdTestCase is a splendid one to behold
 



Quote:
...would appreciate any security guidance that people have
Are you using any particular script packagea, CMS, or ??? for your sites? If so, have you been keeping them updated with the latest security patches?
TestCase is offline  
Old 07-21-2006, 08:26 PM   #20 (permalink)
NamePros Member
Join Date: May 2005
Location: Brighton, CO USA
Posts: 56
Convergence is an unknown quantity at this point
 



Your subdomains are still there...

Based on your format of the subdomains and the "wordpress" at the bottom, I would suspect the hackers are simply typing "Proudly Powered by WordPress" in Google and taking advantage of WordPress' security holes -

I would also contact WordPress and/or their forums...

Good Luck!

Convergence Companies
a Specialized Internet Marketing Company
Convergence is offline  
Old 07-21-2006, 08:38 PM   #21 (permalink)
NamePros Regular
Join Date: Mar 2005
Location: Arizona
Posts: 331
MK3Design has a spectacular aura aboutMK3Design has a spectacular aura about
 



Ive been having the same problems recently. They got about 15 of my sites. It sucks. Now im getting a dedicated server where only I can login from this computer.

Good luck
__________________
I can design and code(table less xhtml) ANYTHING you can think of! So...Let me develop your domain names! I also do SEO! PM me to see my excellent Portfolio.
MK3Design is offline  
Old 07-22-2006, 05:48 PM   #22 (permalink)
NamePros Member
Join Date: May 2006
Location: UK
Posts: 99
Treacle is on a distinguished road
 



Originally Posted by TestCase
Are you using any particular script packagea, CMS, or ??? for your sites? If so, have you been keeping them updated with the latest security patches?
No CMS but an image upload in php might be the one. They hacked just my index page - however the whole server has been affected for my (former) host.
Treacle is offline  
Old 07-22-2006, 05:55 PM   #23 (permalink)
Ravaged By Age
 
Badger's Avatar
Join Date: Jun 2004
Location: PST + 8
Posts: 3,502
Badger has much to be proud ofBadger has much to be proud ofBadger has much to be proud ofBadger has much to be proud ofBadger has much to be proud ofBadger has much to be proud ofBadger has much to be proud ofBadger has much to be proud of
 

Member of the Month
June 2006
Save a Life Find Marrow Donors!
if they have access to your sever and ftp files etc then despite you reloading the index files etc then they can do it again..

Why though, god only knows...?

All you have to do is change your password on your ftp/Cpanel andl load up your files and away you go...
Badger is offline  
Old 07-22-2006, 07:51 PM   #24 (permalink)
NamePros Regular
 
simpsons's Avatar
Join Date: Apr 2005
Location: England
Posts: 610
simpsons has a spectacular aura aboutsimpsons has a spectacular aura about
 



Always make different passwords and don't forget them
simpsons is offline  
Old 07-23-2006, 01:27 AM   #25 (permalink)
NamePros Regular
 
MyPGP's Avatar
Join Date: Jun 2006
Location: Quincy
Posts: 266
MyPGP is an unknown quantity at this point
 



Subscribe to Secunia.Com advisories. They might give you a good "Heads Up" in regards to any security holes in your hosting/os apps.
__________________
Me | Arpegg.io | "Why have a Dot Com when all you need is a DOT?
MyPGP is offline  
Closed Thread


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


Liquid Web Smart Servers  
All times are GMT -7. The time now is 04:22 AM.

Managed Web Hosting by Liquid Web
Domain name forum recommended by Domaining.com Powered by: vBulletin® Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.6.0 Ad Management plugin by RedTyger