PDA

View Full Version : Recent problems with the message board forced us to move to the new server



imported_Gman
07-23-2003, 01:12 PM
We are now on the new server, sooner than I had planned. We experienced a loss of all message board profiles (user accounts) on the old server. No one could login including me. I am still looking into what caused the problem. Things are pointing to a security breach.

-Gerard

%seRge%
07-23-2003, 01:42 PM
No matter how hard they try they can't stop you.

graemlins/respekt.gif http://deephousepage.com/smilies/tongueout.gif

Hold it down GMAN

[ July 23, 2003, 02:44 PM: Message edited by: %seRge% ]

AD
07-23-2003, 01:45 PM
Security breach??? graemlins/scared.gif Oh oh...I hope you log everything, G.

So easy a protic can do it (QUAD)
07-23-2003, 01:58 PM
THANK YOU SIR graemlins/thumbsup.gif FOR ADDRESSING THIS. I THOUGHT I WOULD HAVE TO TAKE MY STUPID COMPUTER APART TO SEE WHY THAT WAS HAPPENING TO ME AS WELL. SEEMS THAT IT WORKED OUT FOR YOU. HOPEFULLY YOU DIDN'T LOOSE ANY VALUABLE INFO RELATED TO THE PAGE.

[ July 23, 2003, 02:59 PM: Message edited by: DJ QUAD ]

imported_Gman
07-23-2003, 02:00 PM
Originally posted by %seRge%:
No matter how hard they try they can't stop you.

graemlins/respekt.gif http://deephousepage.com/smilies/tongueout.gif

Hold it down GMAN If this turns out to be the case (a security breach that is) I have not done anything to anyone. graemlins/conf44.gif I am working with html.com for some answers.

-G

darrow
07-23-2003, 02:40 PM
Originally posted by Gman:
We are now on the new server, sooner than I had planned. We experienced a loss of all message board profiles (user accounts) on the old server. No one could login including me. I am still looking into what caused the problem. Things are pointing to a security breach.

-Gerard could be a security thing. i think my site and board got attacked last night around the same time dhp started having issues. My board showed 28 people logged on and each IP address was coming from the same network and showed as logging in at the same time. My board never has more than one person on it...me.

[ July 23, 2003, 03:41 PM: Message edited by: darrow ]

Tee Cee 13
07-23-2003, 03:42 PM
I HOPE EVERYTHING TURNS OUT OKAY BRO.... I couldn't log in this morning at all.... Keep up the good work my Brother....

graemlins/cool_shades.gif

[ July 23, 2003, 04:44 PM: Message edited by: T.C. 13 ]

Tony Cano
07-23-2003, 04:13 PM
somebody has a lot of free time!

tc

däp
07-23-2003, 04:43 PM
that was wierd. the first time i tried to log in and got the error i was like, "this isn't happening." tried to log in like a hundred times after that and thought, damn!!!

that error message was ominous.

David Le C
07-23-2003, 05:33 PM
I hope nobody is stupid enough to mess with the DHP... ;)

DJ Timmy Richardson
07-23-2003, 05:51 PM
Originally posted by David Le C:
I hope nobody is stupid enough to mess with the DHP... ;) Um it has happened b4...

DJ Timmy Richardson
07-23-2003, 05:52 PM
AOL was acting funny last night as well.

SPG
07-23-2003, 07:55 PM
Originally posted by DJ Timmy Richardson:
AOL was acting funny last night as well. That's when I noticed it as well.

Glad it's back up.

SPG

imported_Gman
07-23-2003, 09:14 PM
^

FK
07-23-2003, 10:55 PM
Originally posted by Gman:
^ Lessons learned: False alert = Potent warning.

Of all things, please maintain regular daily site backups of your database and other files, a good webmaster can write an automated script that does this for you (*nix 'cron' job) if you don't already have it done, making sure that the backup is then downloaded off-site. Do a test restore on a spare server to make sure that your backup data is valid. With this in place, the worst you can lose is one day's data and a few recent users!

You can also analyze your ISP's log files at the time the incident happened, (access_log and error_log) they yield a surprising amount of information. If you find some IP addresses that seem to initiate a hack, there are techniques available that allow the selective banning of multiple ranges of IP addresses, up to entire sub-nets. The recent web site defacement hacking contest seemed to have had most of its activity originating from Brazil...

Those being things you are probably doing anyway...

Interesting security-related site (http://www.computercops.net/) for you.

Number Two
07-24-2003, 10:43 AM
Gezz! I thought I was banned or something. I couldn't log on for crap! Peace.