elouai (![[info]](http://p-stat.livejournal.com/img/userinfo.gif){kind=small} elouai) wrote,@ 2008-02-20 12:57:00 |
|
Botnet was installed on website
I finally found out what the problem was.
There was an exploit used by hackers with an old script that has since been removed.
They installed a botnet and had launched an attack on a server with that script.
The only 3rd party tool used on the site, ended up compromising it.
The scripts have been cleaned up and the botnet removed.
also certain programs were moved to root, so elouai should be much better protected in the future.
We have in the meantime changed the IP address so within 24 hours everyone should be able to see elouai.com again
try this IP
http://74.86.125.96/
one uplink provider was blocking (nulling) our IP address.
- Lou
I finally found out what the problem was.
There was an exploit used by hackers with an old script that has since been removed.
They installed a botnet and had launched an attack on a server with that script.
The only 3rd party tool used on the site, ended up compromising it.
The scripts have been cleaned up and the botnet removed.
also certain programs were moved to root, so elouai should be much better protected in the future.
We have in the meantime changed the IP address so within 24 hours everyone should be able to see elouai.com again
try this IP
http://74.86.125.96/
one uplink provider was blocking (nulling) our IP address.
- Lou
