Forum Hosting  

Go Back   Forum Hosting > IPB Support > IPB General Support

IPB General Support Post your questions here, no bug reports.


Reply
 
LinkBack Thread Tools Display Modes
Old 08-28-2007, 12:14 PM   #1 (permalink)
Junior Forumer
 
amblito's Avatar
 
Join Date: Oct 2005

Posts: 53
Rep Power: 3 amblito is on a distinguished road
fTrader: (0)
fBuck$: 353
Bank: 0
Total fBuck$: 353

My Forumer
My Country:
Default My forum's been hacked :(

http://brownswood.5.forumer.com

My account has hacked into, fortunately I have backup admin accounts so I can still administer the board.

The pinned threads in my main forum have been unpinned and new thread with:

Hacked By [TimeX] f1r3wAll flAsh0r

as the title was created under my account and pinned.

Some of my forums have been emptied into the main forum.

There is no record of any activity in the log in my Admin CP.

Please can you tell me what the procedure for getting things back to normal is and if you can trace the scumbag who did this? I have already suspended the hacked account and changed the passwords of all admin accounts.
amblito is offline   Reply With Quote
Old 08-30-2007, 02:50 AM   #2 (permalink)
duy
Active Forumer
 
duy's Avatar
 
Join Date: Jul 2006

Location: Hanoi, Vietnam
Posts: 313
Rep Power: 2 duy is on a distinguished road
fTrader: (0)
fBuck$: 1,068
Bank: 0
Total fBuck$: 1,068

My Forumer
My Country:
Send a message via Yahoo to duy
Default Re: My forum's been hacked :(

Admins and mods of forumer.com, can they get data back after the hack was solved?

Cash is not all. We still have golds, silvers, credit cards, bank notes, securities...
duy is offline   Reply With Quote
Old 08-30-2007, 08:33 AM   #3 (permalink)
Senior Forumer
 
Pandemix's Avatar
 
Join Date: Feb 2006

Location: En Jay
Posts: 1,739
Blog Entries: 1
Rep Power: 4 Pandemix will become famous soon enough
fTrader: (14)
fBuck$: 171
Bank: 1,244
Total fBuck$: 1,415

My Forumer
My Country:
Default Re: My forum's been hacked :(

Hi,

Once a topic or post is deleted, it will be deleted forever. Since Forumer does not provide backups, we cannot get your post data back unfortunately.

Pandemix is offline   Reply With Quote
Old 08-30-2007, 08:46 AM   #4 (permalink)
Elite Forumer
 
Wild Cat's Avatar
 
Join Date: May 2007

Location: UK
Posts: 4,567
Rep Power: 7 Wild Cat will become famous soon enoughWild Cat will become famous soon enough
fTrader: (2)
fBuck$: 2,225
Bank: 110,000
Total fBuck$: 112,225

My Forumer
My Country:
Default Re: My forum's been hacked :(

So what's the point of having the back ups when they can not help restore a hacked forum?

I understand that the back ups are not available if the owner wants to make a forum else where........... but surely within the Forumer when a forum was destroyed by a hacker it could be made available.

Wild Cat is offline   Reply With Quote
Old 08-30-2007, 11:11 AM   #5 (permalink)
Junior Forumer
 
amblito's Avatar
 
Join Date: Oct 2005

Posts: 53
Rep Power: 3 amblito is on a distinguished road
fTrader: (0)
fBuck$: 353
Bank: 0
Total fBuck$: 353

My Forumer
My Country:
Default Re: My forum's been hacked :(

Quote:
Once a topic or post is deleted, it will be deleted forever. Since Forumer does not provide backups, we cannot get your post data back unfortunately.
The posts haven't been deleted, they've been moved into the main forum.

I'm going through the Google cached copies of the forums and moving the posts back into the correct forums one at a time - it's very time consuming.
amblito is offline   Reply With Quote
Old 08-30-2007, 03:22 PM   #6 (permalink)
Elite Forumer
 
Winnopeg's Avatar
 
Join Date: Jan 2005

Location: Canada, eh?
Posts: 6,723
Rep Power: 10 Winnopeg is on a distinguished road
fTrader: (24)
fBuck$: 2,170
Bank: 373,801
Total fBuck$: 375,972

My Forumer
My Country:
Default Re: My forum's been hacked :(

Quote:
Originally Posted by Wild Cat View Post
So what's the point of having the back ups when they can not help restore a hacked forum?

I understand that the back ups are not available if the owner wants to make a forum else where........... but surely within the Forumer when a forum was destroyed by a hacker it could be made available.

The backups can only be applied server wide. So in order to recover a single forum, every forum hosted on the server would have to be rolled back a day or more, loosing any newer posts, members, setting changes, and so on.

Please do not PM me for support.
Winnopeg is offline   Reply With Quote
Old 08-30-2007, 03:26 PM   #7 (permalink)
Learned Forumer
 
Edwin's Avatar
 
Join Date: Sep 2005

Location: Europe/UK/England/
Posts: 7,469
Blog Entries: 4
Rep Power: 11 Edwin has a spectacular aura aboutEdwin has a spectacular aura about
fTrader: (35)
fBuck$: 630
Bank: 145,243
Total fBuck$: 145,872

My Forumer
My Country:
Default Re: My forum's been hacked :(

Unfortunately that means that you will have to move the posts back individually. As for tracing the hacker I would expect he or she was using a proxy to mask their identity.

Edwin is offline   Reply With Quote
Old 08-30-2007, 03:32 PM   #8 (permalink)
Elite Forumer
 
Wild Cat's Avatar
 
Join Date: May 2007

Location: UK
Posts: 4,567
Rep Power: 7 Wild Cat will become famous soon enoughWild Cat will become famous soon enough
fTrader: (2)
fBuck$: 2,225
Bank: 110,000
Total fBuck$: 112,225

My Forumer
My Country:
Default Re: My forum's been hacked :(

Quote:
Originally Posted by Winnopeg View Post
The backups can only be applied server wide. So in order to recover a single forum, every forum hosted on the server would have to be rolled back a day or more, loosing any newer posts, members, setting changes, and so on.
Ahhhhh

OK, thanks for the explanation.
Wild Cat is offline   Reply With Quote
Old 08-30-2007, 05:36 PM   #9 (permalink)
Banned User
 
set2soar's Avatar
 
Join Date: Jul 2007

Location: ballarat
Posts: 156
Rep Power: 0 set2soar is on a distinguished road
fTrader: (0)
fBuck$: 729
Bank: 0
Total fBuck$: 729

My Forumer
My Country:
Send a message via Yahoo to set2soar
Default Re: My forum's been hacked :(

Quote:
Originally Posted by amblito View Post
http://brownswood.5.forumer.com

My account has hacked into, fortunately I have backup admin accounts so I can still administer the board.

The pinned threads in my main forum have been unpinned and new thread with:

Hacked By [TimeX] f1r3wAll flAsh0r

as the title was created under my account and pinned.

Some of my forums have been emptied into the main forum.

There is no record of any activity in the log in my Admin CP.

Please can you tell me what the procedure for getting things back to normal is and if you can trace the scumbag who did this? I have already suspended the hacked account and changed the passwords of all admin accounts.
Did you sign up for FAP which is the total back up of your forum? Use the same details as what you did with your main admin account and go in and sign up.
set2soar is offline   Reply With Quote
Old 08-30-2007, 05:37 PM   #10 (permalink)
Banned User
 
set2soar's Avatar
 
Join Date: Jul 2007

Location: ballarat
Posts: 156
Rep Power: 0 set2soar is on a distinguished road
fTrader: (0)
fBuck$: 729
Bank: 0
Total fBuck$: 729

My Forumer
My Country:
Send a message via Yahoo to set2soar
Default Re: My forum's been hacked :(

Quote:
Originally Posted by Edwin View Post
Unfortunately that means that you will have to move the posts back individually. As for tracing the hacker I would expect he or she was using a proxy to mask their identity.
Sorry for the double post here but can you ban a proxy site from your forum?
set2soar is offline   Reply With Quote
Old 08-30-2007, 05:41 PM   #11 (permalink)
Learned Forumer
 
Edwin's Avatar
 
Join Date: Sep 2005

Location: Europe/UK/England/
Posts: 7,469
Blog Entries: 4
Rep Power: 11 Edwin has a spectacular aura aboutEdwin has a spectacular aura about
fTrader: (35)
fBuck$: 630
Bank: 145,243
Total fBuck$: 145,872

My Forumer
My Country:
Default Re: My forum's been hacked :(

Unfortunately not, thats the whole object of using a proxy

Edwin is offline   Reply With Quote
Old 08-30-2007, 09:42 PM   #12 (permalink)
Elite Forumer
 
Winnopeg's Avatar
 
Join Date: Jan 2005

Location: Canada, eh?
Posts: 6,723
Rep Power: 10 Winnopeg is on a distinguished road
fTrader: (24)
fBuck$: 2,170
Bank: 373,801
Total fBuck$: 375,972

My Forumer
My Country:
Default Re: My forum's been hacked :(

Well, if you have the proxy's IP address you can...

Quote:
Originally Posted by set2soar View Post
Did you sign up for FAP which is the total back up of your forum? Use the same details as what you did with your main admin account and go in and sign up.
FAP in this case is not needed as he had a backup admin account. FAP is only used to regain control of your account, it is not a "total backup of your forum".

Please do not PM me for support.
Winnopeg is offline   Reply With Quote
Old 08-30-2007, 11:02 PM   #13 (permalink)
Banned User
 
set2soar's Avatar
 
Join Date: Jul 2007

Location: ballarat
Posts: 156
Rep Power: 0 set2soar is on a distinguished road
fTrader: (0)
fBuck$: 729
Bank: 0
Total fBuck$: 729

My Forumer
My Country:
Send a message via Yahoo to set2soar
Default Re: My forum's been hacked :(

Quote:
Originally Posted by Winnopeg View Post
Well, if you have the proxy's IP address you can...


FAP in this case is not needed as he had a backup admin account. FAP is only used to regain control of your account, it is not a "total backup of your forum".
Thanks for that.
set2soar is offline   Reply With Quote
Old 09-01-2007, 03:11 PM   #14 (permalink)
Junior Forumer
 
amblito's Avatar
 
Join Date: Oct 2005

Posts: 53
Rep Power: 3 amblito is on a distinguished road
fTrader: (0)
fBuck$: 353
Bank: 0
Total fBuck$: 353

My Forumer
My Country:
Default Re: My forum's been hacked :(

I've been hacked again, got this message:

"Hacked By [TimeX] f1r3wAll flAsh0r

You say why I did I get hacked?

Well Im talking TO FORUMER.COM THEY SUCK!!! When will they back up your files or have and IPB that isnt exploitable? You have better luck using www.************.com

Who do you think hacked Server #1???? http://fhq.forumer.com/showthread.php?t=69658

Since [TimeX] is a hacking clan we will take out as much servers as we can.

good luck FORUMER.COM You need it.

PS. Move to an ************ board. If you dont want this to happen again.

PSS. Im not advertising or have any connections with ************."
amblito is offline   Reply With Quote
Old 09-01-2007, 03:21 PM   #15 (permalink)
Junior Forumer
 
amblito's Avatar
 
Join Date: Oct 2005

Posts: 53
Rep Power: 3 amblito is on a distinguished road
fTrader: (0)
fBuck$: 353
Bank: 0
Total fBuck$: 353

My Forumer
My Country:
Default Re: My forum's been hacked :(

The hacker's IP address is showing as 74.98.10.37 which resolves to:

CPE0030ab0d2430-CM0011aec7fd74.cpe.net.cable.rogers.com
amblito is offline   Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads
Thread Thread Starter Forum Replies Last Post
Sub forum's go2munawar1234 phpBB2 General Questions 3 07-02-2007 11:38 PM
ES Forum's sigs! Ion Graphics Showoff 11 12-01-2006 08:43 AM
images in my sub-forum's ShiningGirl IPB General Support 3 07-11-2005 03:50 PM
My forum's just disappeared!? borofan phpBB2 General Questions 4 05-04-2005 12:47 PM
My forum's down... solo.nate phpBB2 General Questions 3 02-19-2005 08:42 AM