PDA

View Full Version : wtf



Blade1941
February 27th, 2007, 10:11
http://vivohost.us.to/

Server Database, Forum and Website files are all gone :S :confused4

PaulP
February 27th, 2007, 10:23
Hi Blade,

If they hacked you/your server then sue them.

Hacking is still seen as a criminal action and is forbidden by law.

They left enough details to take action against them.

Kind regards,
PaulP.

(But check your server log files to be absolutely sure, they could try and trick you with info they left behind)

Blade1941
February 27th, 2007, 10:25
Well I can't know it was them for sure :/ Maybe someone used their names? But I'll try check out the server log..

PaulP
February 27th, 2007, 10:26
But you do have log files. FTP logs, Server logs, IP logs etc.

This will take some time to investigate.

I hope you also have a recent backup.

PaulP.

Blade1941
February 27th, 2007, 10:29
Btw I didn't know so many chinese hosts has linked to my site,
http://myand.com/forumdisplay.php?fid=15

And if you search vivohost.us.to in google you only found chinese sites,
http://www.google.com/search?hl=eng&q=vivohost.us.to

I also remember a lot of chinese users in the forums, there were over 100 users it can have been any of the users or associated to this host in some way, maybe one of their disappointed users or something.

PaulP
February 27th, 2007, 10:33
Most of the time it is a user that already had access from inside your hosting.

This is why you should be carefull with auto-signup scripts and make sure the security is in place to avoid hacks.

Just examine the server logs, put the backup back and try to find the security problem that you seem to have.

Kind regards,
PaulP.

Blade1941
February 27th, 2007, 10:36
Hmm, I didn't have auto-signup scripts, I accepted users that posted their apps on the forum.

I do however have Backups (fortunately) that I'll probably upload tomorrow or today.

JohnN
February 27th, 2007, 11:42
oh man thats really bad.
if theres anything i can do to help you out do shout - i have lots of spare space on my server right now.

stuffradio
February 27th, 2007, 14:06
it's a touchy topic... it's hard to know who is who. The only thing you can really do is higher someone to examine your stuff like a credited company or something.... and get your local authorities involved, or maybe only the FBI or something can help. Dunno much about that

Blade1941
February 27th, 2007, 14:55
it's a touchy topic... it's hard to know who is who. The only thing you can really do is higher someone to examine your stuff like a credited company or something.... and get your local authorities involved, or maybe only the FBI or something can help. Dunno much about that

Lol why should I go so far? Why would I waste my money on a lawyer and stuff when I got backup on everything, I think you've exaggerated a bit there dude :D

This just just a dumb prank/joke, which I don't care about anyhow.. So I have no time to sue them whatsoever.. You can sue them for me if you want..

Maybe Report them to their ISP, if I knew their hostname but it's not like they've assaulted me to death.

mp40_flysta
February 27th, 2007, 15:30
Interesting... I contacted them via there site, I wonder what excuse I'll get. Or if this is a hacker trying to pull someone down. (i.e They we're suspended from there server now they are trying to get the company sued.)

(P.S I did this because i was signed up for vivohost!)

themainman
February 27th, 2007, 17:55
Someone could be trying to frame them?

mp40_flysta
February 27th, 2007, 18:20
///\\\ Start quote of email ///\\\
Hello (my_name_removed)

Hello,
That's quite obviously not from us. Why would we have any intention of 'hacking' other host websites, especially ones without a TLD?
---> This is the odd part <---
I believe your username is Blade1941 right? Next time, I would try better to hide your identity.
---> End of odd part <---

Regards,

Administrator
2UK2

///\\\ End quote ///\\\

As i look at it more i seems less to be the company or a supporter and more of a "script kiddie" I still stand behind my prediction that it may be a previous (now suspended) user who is trying to get back at the company.

But what is really odd is that there was very little chance of them getting in via the website (i.e It was just a plan php text webpage, No forms no sign up scripts. Just the webpage and a SMF Forum which appeared to be kept very up-to-date

The reason why i add the "odd part" frame is that i dont really know how / why the would have though i was Blade1941 and how they knew that nick. As there is no archive of the forums (Not listed in Google - webarchive.org etc)

So i guess it wasnt them. I sent them an email back telling them if i sounded rude that i didn't mean to. Hopefully vivohost gets back online.

-Mu2007

Edit:

I re-read the posts above and i think i have a suggestion, I used to be a "partner" in running a webhost and we had many links from Chinese web sites about our service. We thought "Well great more customers for us = more ad revenue etc" Well in the end it came up to hurt us as we got hacked from someone in china (We also had been hacked from china before but we didn't come to think of it at that time) So after the 3rd hacking from china we blocked Chinese ISP's and than did not accept accounts from Chinese users, what do you know? It fixed the problem. We ran fine for a few months before we got kicked off of our datacenter by savvis (Used to much Bandwidth) and than we never came back but the point is i think this could be another case of being hacked from Chinese "script kiddies"

Sadly, that was that case and this is this case so millage may vary. It could help you or it could hurt you.

PaulP
February 27th, 2007, 19:25
Chinese people should not complain then that they cannot get free webhosting anymore when this 'Chinese hacking reputation' get's worse and worse.
I see more and more webhostings blocking China and refuse Chinese people for hosting.

Can somebody explain me what the fun is in bringing a free webhosting down when he/she offers free services to the whole world ?

Regards,
PaulP.

ZoomCities
February 27th, 2007, 19:32
Those chinese links are just free hosting threads (your own thread most of the time) re-posted to some chinese forums. Almost every free hosting website have those kind of links. Nothing to be paranoid about.

Blade1941
February 27th, 2007, 22:31
Those chinese links are just free hosting threads (your own thread most of the time) re-posted to some chinese forums. Almost every free hosting website have those kind of links. Nothing to be paranoid about.

Yeah I know but I'm just saying that I didn't know so many chinese hosts has linked to my site :confused4
I don't even live near china, and half of the forum users was chinese people.

EDIT: It's against the law to copy and paste material that's not written by yourself.

tumble
February 27th, 2007, 22:35
you should toss up another index page to take that one off. And even i am link on some chinese sites. Mostly they just post up yout info for free hosting and if you got instant activation bang you get the big hit.

Were you a reseller on anothers server? Or did you lease a server?

Blade1941
February 28th, 2007, 03:21
The reason why i add the "odd part" frame is that i dont really know how / why the would have though i was Blade1941 and how they knew that nick. As there is no archive of the forums (Not listed in Google - webarchive.org etc)


There was a login system in the frontpage, and the system was still a bit buggy and in the forum (I think one user) posted his FTP/MySQL details to get help.

And I also posted a complaint about them a long time ago, at the Devshed forums:

http://forums.devshed.com/web-hosting-12/2uk2-down-294868.html

The reason they know my name can be because I also posted that my page was recently hacked in the Devshed forums (did that yesterday) and most of their supporters are moderators there.

(my topic seems to be deleted now though, removed from the main/public hosting forums without a reason or PM.)

mp40_flysta
February 28th, 2007, 14:05
I looked more at them and they are a real joke. I can get a server at Invison Power Services (maker of IPB) for less than there monthly price. And I'll know its an actual server in an actual rack, Not in someones kitchen. :lol:

Blade1941
March 1st, 2007, 03:47
Some news

I've been working on a new version for our users, with much more security and functions.

You will be able to upload movies, short videos, software, music and images for all the users to view & download! (But only legal stuff will be allowed)

I've made some strict plans this time and you actually have to be much more active than before when almost no one was active in the forums.

Offtopic: mu2007, Was aflrunner@gmail.com your msn? Because you're offline :P

Subhash
March 1st, 2007, 05:04
It was so bad to hear about the hacking. Now your site is totally down, did you put it down because of some work? as yestarday also vivohost.us.to was accessable but with hacked page. When the site will be up again?

Hope you site will be back again soon, best wishes for your site.

Blade1941
March 1st, 2007, 09:51
It was so bad to hear about the hacking. Now your site is totally down

More bad news my Reseller Account has is down now because its been removed.


as yestarday also vivohost.us.to was accessable but with hacked page. When the site will be up again?

To be honest it was gonna be up today, but today I contacted my lawyer and he said he can't do anything about the hacking or whatever so I got mad and kicked on a big window in my house.


I was advised to go to the hospital and check it out because there was a lot of blood involved but I don't like hospitals so I wont go :/ now my leg is all bloody so I have to rest and probably work something out tomorrow or overmorrow.

Regards Blade.

Koh
March 1st, 2007, 10:25
More bad news my Reseller Account has is down now because its been removed.



To be honest it was gonna be up today, but today I contacted my lawyer and he said he can't do anything about the hacking or whatever so I got mad and kicked on a big window in my house.


I was advised to go to the hospital and check it out because there was a lot of blood involved but I don't like hospitals so I wont go :/ now my leg is all bloody so I have to rest and probably work something out tomorrow or overmorrow.

Regards Blade.

Sorry to hear that, hope your leg will get better soon.

Blade1941
March 1st, 2007, 10:30
Sorry to hear that, hope your leg will get better soon.

thanks mate :wave:

Subhash
March 1st, 2007, 12:18
More bad news my Reseller Account has is down now because its been removed.



To be honest it was gonna be up today, but today I contacted my lawyer and he said he can't do anything about the hacking or whatever so I got mad and kicked on a big window in my house.


I was advised to go to the hospital and check it out because there was a lot of blood involved but I don't like hospitals so I wont go :/ now my leg is all bloody so I have to rest and probably work something out tomorrow or overmorrow.

Regards Blade.

Don't get so upset, and don't hurt yourself. All that happend, forget it and have a new start. We are with you and feel free to ask anything which we can do.
I was member of Vivohost and you might remember me, I am the one with the maximum post in your forum, next to your post count (there i had different username, don't want to disclose here). I will be definitely in your new site.

Get well soon, best of luck to you and for your new site.

mp40_flysta
March 1st, 2007, 13:56
Some news

I've been working on a new version for our users, with much more security and functions.

You will be able to upload movies, short videos, software, music and images for all the users to view & download! (But only legal stuff will be allowed)

I've made some strict plans this time and you actually have to be much more active than before when almost no one was active in the forums.

Offtopic: mu2007, Was aflrunner@gmail.com your msn? Because you're offline :P

Sorry I'm late getting back here. No mp4020@gmail.com was me. I had never gotten my account due to WHM problems i suppose.

P.S I dont know how much you were spending before but i found a Unmetered (They call it unlimited) WHM/cPanel Reseller for 8.95 / Month its a company called WebPoint Hosting (Don't know where they have there servers from) there on eBay and on there website.
http://webpointhosting.com/index.php

fl00d
March 2nd, 2007, 17:23
I'll help you if you want. You should've told me when it happened =/ I could've done something.

Blade1941
March 3rd, 2007, 00:34
I'll help you if you want. You should've told me when it happened =/ I could've done something.

I know fl00d but the worst thing is I had the Backup uploaded yesterday or the day before to the site and when I formated my computer I go to the site again.

And someone has removed the whole account (weither it's the reseller) or the hacker I don't know but the backups seems to be gone also right now.

ray9
March 3rd, 2007, 14:05
Hi Blade1941,

is it your own server? Do you still have the log files? I am willing to check those out for you.
If its not your server: get the logs from your host, good hosts will provide that info (apache + cpanel logs).
Contact me at: info/a/ray9.net

Blade1941
March 3rd, 2007, 14:41
I had log files but not anymore due to my Reseller being removed, however I'm working to get the hosting up again.

JohnN
March 3rd, 2007, 14:54
hope your feeling better soon blade, free hosting sure cranks up the blood pressure eh.
if i can help in any way do shout!

fl00d
March 3rd, 2007, 20:52
if you have logs, I can look into last IP's visited and probably trace them effectively.