03-28-2005, 03:38 PM
|
Free Member
|
|
Join Date: Apr 2002
Location: Puerto Rico, USA
Posts: 13,537
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
@All,
The hacker (or should I say cracker?) was identified.
The attack came from IP address 62.43.75.130, which resolves to:
62-43-75-130.user.ono.com
Attack started at: 28/Mar/2005:02:41:37 -0700
Completed at: 28/Mar/2005:03:14:31 -0700
The service provider of the attacker resolves to a provider in Spain:
Registrant:
Cableuropa SA [NORG-3854901]
C\ Basauri, 7
E-28023 Aravaca. SPAIN
All corresponding logs and actions have been sent to the proper authorities.
Sadly, the attacker screwed up the database BIG TIME, and the latest backup is 12 days old, so the forum was restored to that database set.
If this happens again, I will definitely look into another forum software, which won't be phpBB based.
Thanks,
-kwag
|
Someday, 12:01 PM
|
|
Site Staff / Ad Manager
|
|
Join Date: Dec 2002
Posts: 42
Thanks: ∞
Thanked 42 Times in 42 Posts
|
|
|
03-28-2005, 03:53 PM
|
Free Member
|
|
Join Date: May 2003
Posts: 10,463
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
The last message is not 6 days but 12 days old
|
03-28-2005, 03:56 PM
|
Free Member
|
|
Join Date: Apr 2002
Location: Puerto Rico, USA
Posts: 13,537
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
|
03-28-2005, 03:59 PM
|
Free Member
|
|
Join Date: Oct 2003
Location: London, England (UK)
Posts: 1,035
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
I was away for the weekend and tried to go online to KVCD.net to find that message saying that payment wasn't made for the site.
I thought it was strange and was worried fearing KVCD.net would be gone forever.
Im sorry to hear that some lamer Hacker/Cracker did this to your site Karl it is disgraceful that some people have nothing better to do than mess everything up for everyone else.
Im also sorry that you lost 12 days of data, I can just imaging how much of a pain the a$$ this must be for you.
I hope this is the last time we have to endure this sort of thing.
__________________
Regards.
Michael.
|
03-28-2005, 04:27 PM
|
Free Member
|
|
Join Date: Jul 2003
Location: Valencia (España)
Posts: 741
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
Came back today from holiday, and wondered: "I'm sure it happened lots of things at KVCD", and decided "to go for a walk" in the forum... first happened as Zyphon said.
And now that I could manage to get in...
I know you already knew, but there's really evil people out there. You said that: a cracker.
I feel sad for what happened.
|
03-28-2005, 04:36 PM
|
Free Member
|
|
Join Date: Apr 2002
Location: Puerto Rico, USA
Posts: 13,537
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
Thanks guys 
BTW, I just upgraded the forum with all latest patches.
We're now on the latest version of phpBB.
-kwag
|
03-28-2005, 05:31 PM
|
Free Member
|
|
Join Date: Mar 2004
Posts: 92
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
Bad day, man...
ok, let's refill that forum
FuPP
|
03-28-2005, 05:37 PM
|
Free Member
|
|
Join Date: Apr 2002
Location: Puerto Rico, USA
Posts: 13,537
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
Quote:
Originally Posted by FuPP
Bad day, man...
|
Tell me about it Quote:
ok, let's refill that forum 
FuPP
|
Thanks
-kwag
|
03-28-2005, 06:31 PM
|
Free Member
|
|
Join Date: Oct 2003
Location: London, England (UK)
Posts: 1,035
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
Quote:
Originally Posted by kwag
Thanks guys 
BTW, I just upgraded the forum with all latest patches.
We're now on the latest version of phpBB.
-kwag
|
Great news Karl, let's hope this is the end of these nasty hackers.
Quote:
Originally Posted by FuPP
Bad day, man...
ok, let's refill that forum
FuPP
|
Agreed on both counts.
__________________
Regards.
Michael.
|
03-28-2005, 08:37 PM
|
Free Member
|
|
Join Date: Apr 2002
Location: Puerto Rico, USA
Posts: 13,537
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
Anybody noticed the number of "Guest" users on the forum 
I wonder if we have a new kind of worm trying to breach phpBB forums again
-kwag
|
03-28-2005, 08:40 PM
|
Free Member
|
|
Join Date: Apr 2002
Location: Puerto Rico, USA
Posts: 13,537
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
Quote:
Originally Posted by Zyphon
let's hope this is the end of these nasty hackers.
|
Crackers, that is 
I'm a hacker 
Hackers are good, and crackers are evil
-kwag
|
03-29-2005, 12:13 AM
|
Free Member
|
|
Join Date: Mar 2003
Location: Madrid-Spain
Posts: 515
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
Hi,
Quote:
Originally Posted by digitall.doc
Came back today from holiday, and wondered: "I'm sure it happened lots of things at KVCD", and decided "to go for a walk" in the forum... first happened as Zyphon said.
And now that I could manage to get in...
I know you already knew, but there's really evil people out there. You said that: a cracker.
I feel sad for what happened. 
|
Occured exactly the same...
As Fupp said, let's fill the forum!
Salu2
Fabrice
|
03-29-2005, 07:25 AM
|
Free Member
|
|
Join Date: Oct 2003
Location: London, England (UK)
Posts: 1,035
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
Quote:
Originally Posted by kwag
Quote:
Originally Posted by Zyphon
let's hope this is the end of these nasty hackers.
|
Crackers, that is 
I'm a hacker 
Hackers are good, and crackers are evil
-kwag
|
Sorry Karl I stand corrected you are right of course.
Crackers are evil and mess up so many things including Forums and Software.
__________________
Regards.
Michael.
|
03-29-2005, 08:12 AM
|
Free Member
|
|
Join Date: Oct 2003
Posts: 130
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
well, I don't know. I thought hackers=to find some flews in website, forums
crackers= to modify a software, usually to be able to use it without paying.
after that, white hat = good/blackhat= evil
|
03-31-2005, 05:44 PM
|
Free Member
|
|
Join Date: Apr 2002
Location: Puerto Rico, USA
Posts: 13,537
Thanks: 0
Thanked 0 Times in 0 Posts
|
|
After a very careful look at the log files on that day, the hack was clearly caused by a Worm 
Each transaction was about one second apart, so this was not a manual user. It was a Worm(bot).
So there IS a new worm which can destroy phpBB forums version 2.0.11 (or below).
-kwag
|
All times are GMT -5. The time now is 03:54 AM — vBulletin © Jelsoft Enterprises Ltd
|