My website has been hacked

Forums › Orcon and iServe › My website has been hacked

1 | 2 | 3 | 4

Regs

Cloud Guru
4060 posts

Uber Geek

Trusted

Snowflake

Subscriber

# 445209 3-Mar-2011 16:13

buggerit: However, the admin login had not been accessed for a long time which I immediately checked, so it was unlikely to be through the administrator backend using the default admin login (which I will be removing from now on though!).
I also reviewed the raw logs files and could not find any suspicious POST activity. Maybe Orcon will be able to review the logs for each hacked site on their server and identify the pattern?

I just don't believe it's a CMS issue. It is most of the time I agree. But for a whole lot of sites on one server maybe having an FTP account or admin backend account and password all hacked within days of each other seems strange.

any hacker worth his/her weight would/should delete or fake the logs to hide their activity :P

Sales Engineer
Snowflake
www.snowflake.com

about.me/nzregs
Twitter: @nzregs

timn

2 posts

Wannabe Geek

# 447272 10-Mar-2011 13:38

Our website was disabled by an Orcon tech at least 3 times over the last few days because he mistakenly thought an attack was coming via it.
The first 2 times he did this by editing or creating a .htaccess file.
This produces nothing in the Orcon memo logs so the support staff I contacted had no record of it.
I found and corrected both of those and then he disabled the site by a method that did produce a memo.
I wasn't informed of this 9 hours later after repeated calls to the Orcon support line.
Needless to say we will be moving to a different hosting company.
Any recommendations?

aw

273 posts

Ultimate Geek

# 447281 10-Mar-2011 13:52

I'm with Openhost, my only stuffup with them was when I moved from their Reseller account to a VPS host just lately, where their system (Plesk) accidentally wiped all the DNS records for all mine and my client's domains when the Reseller account was closed. Having said that, they did help recreate (almost) everything once aware of the issue. By almost I mean they recreated all the simpler domain layouts while I was left to reconstruct the records for two more complex ones.

This has been the only major issue, and it got resolved reasonably quick - same day. They are pretty good communicators, and whenever they said they'd call me back, they did!

xpd

Chief Trash Bandit
10160 posts

Uber Geek

Mod Emeritus

Trusted

Lifetime subscriber

# 447283 10-Mar-2011 13:53

timn:
Needless to say we will be moving to a different hosting company.
Any recommendations?

Enjoy the many threads on hosting :)

XPD / Gavin / DemiseNZ

Server : i5-3470s @ 3.50GHz 16GB RAM Win 10 Pro Workstation : Ryzen 5 3600 / 16GB DDR4 / RX580 4GB Console : Xbox One

Now on BigPipe 100/100 and 2Talk Add me on Steam

nate

6360 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

# 447327 10-Mar-2011 15:15

timn: Needless to say we will be moving to a different hosting company.
Any recommendations?

Us.

PM me if we can help out.

/shameless plug.

1080p

1332 posts

Uber Geek
Inactive user

# 452361 27-Mar-2011 12:35

I use Dreamhost. It cost me ~NZ$100 for two years hosting (7.5GB space and unlimited bandwidth) with a free TLD domain registration, unlimited possible domains and a bunch of other useful features. I really recommend them.

Hosting in New Zealand is far too expensive and your site users do not notice the difference because the majority of sites online are hosted internationally.

1 | 2 | 3 | 4