Server ATTACK

Posted on May 4th, 2007 by Greg Allard in Server Administration | Comments

I got an e-mail saying that a server I administrate was attacked. There weren’t any details in the message, so later I find out that there was porn posted on the forums. Sounds like spam bots found the phpBB installation and had some fun.

OMG take the server offline immediately!!

I use webfaction to host a lot of my django projects. It has an easy setup that will get you developing quickly and a great community of talented programmers. There is also a quick setup for rails, wordpress, and a lot more.

Python Projects in Users’ Home Directories with wsgi Letting users put static files and php files in a public_html folder in their home directory has been a common...
How to Speed up Your Django Sites with NginX, Memcached, and django-compress A lot of these steps will speed up any kind of application, not just django projects, but there are a...

Greg Allard

After leaving and starting the new job, some people from back there would contact me every now and then for some assistance getting their servers back online. I was only able to help them out by making sure they had all of the files for the website. After a few months of being down, they finally have it back up and running.

The other day, I find out that another one of their servers was compromised. This is the server that someone else there managed. This is the same person that was babbling about phpBB being the problem with the old server (pretty sure it wasn't the problem, just where the problem was noticed). Nice try, blanco nino, too bad your ass got haaacked

Greg Allard

It turned out that the server was compromised and was sending out spam all over the place. And the posts on the forums weren't actually in the database, so they found some other back door to get in and add and change files.

It seems that over reacting in this case wasn't so bad. I get to reinstall everything on the server now too... or quit. Oh wait I already quit.

blog comments powered by Disqus

About the Author

Greg Allard is the programmer behind IvyLees The network for PR and business and Presskit'n Do-It-Yourself Public Relations.

He is also one of the developers in Match Strike: we build websites.

More about Greg Allard »

Find him on:
Recent Posts
Recent Comments
Tags
AJAX Apache Authorization AWS CURL CyTE Data Access Data Types Debian Django Forum Framework GMP GPS How To iPhone JavaScript JSP LDAP Mod Rewrite mod_python MorfU MySQL OAuth OpenID Open Source php phpMyAdmin Pinax PostgreSQL Python Rails regex Rickety Van Ruby Security Server Administration SSO Startup Weekend TinyID Trigger Twitter Ubuntu Usability Wiki

Code Spatter

Server ATTACK

Related posts:

About the Author

Recent Posts

Recent Comments

Tags