My site has been hacked and brought down TWICE in the last 24 hours. - GoFuckYourself.com

skirtcake · 11-03-2015, 11:46 AM

I own and run MormonGirlz.com. We're getting seriously attacked and while I'm working on increasing my security (Cloud Flare) I'm also wondering how to track down whoever is doing this. Isn't it highly illegal? Any thoughts on what I can do?

Thanks for your help!

DamnSexy · 11-03-2015, 12:26 PM

Quote:

Originally Posted by skirtcake

Any thoughts on what I can do?

If your website was hacked, means your code is not secure, you should first take a look there, to see which part was exploited.

You are using a Free cloudflare plan ?

skirtcake · 11-03-2015, 01:17 PM

Yep, on it. And I'm not sure what cloudflare plan I will use. Haven't done it yet. Recommendations?

pornsprite · 11-06-2015, 11:04 PM

I like the concept

j3rkules · 11-07-2015, 03:10 AM

Any site can be hacked if enough time and effort are put in. Therefore, your site security also needs to address the need to backup your site to be able to recreate it.

To remove your site from what hackers consider "Low Hanging Fruit" do the following:
No usernames should be admin and no passwords should be similar to the site name or have dates associated with you personally.
Keep Wordpress, your plugins and your theme updated to the newest versions.
Turn off comments completely. This is optional but strictly for site security, it is preferable.
Be sure you are backing up your site frequently as well.

nightslit · 11-16-2015, 04:59 AM

If you are using wordpress I recommend WordFence and also to relocate the login page (all cms are having the same url structure). Then I would also change all passwords/usernames. Another thing to do is setting up cloud fare as you mentionned, the détails for each plan are on their website. But even normal (free) plan are more secure as all traffic il filtred a minimum.
Then why not looking into the connection logs (in your cpanel) and see what ip adress caused this? Then blocking the ip will be simple.. (or the domain/internet seller).

marlboroack · 10-15-2016, 03:31 AM

Hire a security team

ketheriel · 11-29-2016, 12:32 PM

Being attacked is one thing, being owned is another; While DDoS/DoS can be countermeasured by your operator and as a last line of defense, yourself (or your bofh), being owned usually means someone exploited your code either through SQL injection or other security vulnerability. Finding the full extent of an infiltrated server can take some time and is a very demanding task. There are scripts which might work up to a point, but usually the diagnosis and post mortem are done with the file system on read only and by comparing the hashes of the files with a network copy/backup.

While I might help this one time for the fun of it (assuming it's a POSIX compliant system), I won't fix other peoples code.

Message me if you want my skills on this one!

nosaint · 01-05-2017, 03:04 PM

I don't think you can track them down just because they attack your website. They usually do this using lots of other hacked sites/servers. Probably you could track them only after being hacked if they are stupid enough to leave any traces.

But, the questions is... what does "seriously attacked" means? Is it a DDOS attack? Then it means they simply want to disrupt your services. That is usually the competition.
Are they trying to find exploits? Are they trying to access your admin area using a dictionary attack?

j3rkules · 01-05-2017, 03:22 PM

11-03-2015

This is an old thread. Why you even respond to that?

bns666 · 01-05-2017, 03:33 PM

probably to reach 30 posts so he can post urls

redsfv89 · 02-21-2017, 09:18 PM

I hate to tell you this, but I am a former hacker, and I deal with sites and security consulting now. First off it's wordpress, or Joomla you got problems. and if you are hiding behind cloudflare does know good, it's still possible to get your physical ip address, and that is the flaw with cloudflare, contact me on skype: john.sexmex I can help you.

Quote:

Originally Posted by skirtcake

I own and run MormonGirlz.com. We're getting seriously attacked and while I'm working on increasing my security (Cloud Flare) I'm also wondering how to track down whoever is doing this. Isn't it highly illegal? Any thoughts on what I can do?

Thanks for your help!

yuu.design · 02-21-2017, 11:43 PM

sad to hear

xXXtesy10 · 02-22-2017, 08:31 PM

Quote:

Originally Posted by redsfv89

I hate to tell you this, but I am a former hacker, and I deal with sites and security consulting now. First off it's wordpress, or Joomla you got problems. and if you are hiding behind cloudflare does know good, it's still possible to get your physical ip address, and that is the flaw with cloudflare, contact me on skype: john.sexmex I can help you.

Duckers · 03-08-2017, 08:22 AM

that's funny

gamejump · 04-05-2017, 09:19 AM

see even the wordpress are gets hacked
you have not mentioned on which cms your site is

magneto664 · 07-14-2017, 04:20 AM

Quote:

Originally Posted by skirtcake

Yep, on it. And I'm not sure what cloudflare plan I will use. Haven't done it yet. Recommendations?

Cloudflare don't save your ass from hackers!
1. Always update your wordpress ASAP.
2. Keep updated plugin
3. Remove old plugins and try find paid solutions
4. buy https://codecanyon.net/item/hide-my-...dpress/4177158
5. use backup system to restore working version when you need it.

11-03-2015, 11:46 AM	#1
skirtcake Registered User Industry Role: Join Date: Jul 2014 Location: SLC Posts: 95	My site has been hacked and brought down TWICE in the last 24 hours. I own and run MormonGirlz.com. We're getting seriously attacked and while I'm working on increasing my security (Cloud Flare) I'm also wondering how to track down whoever is doing this. Isn't it highly illegal? Any thoughts on what I can do? Thanks for your help! __________________ * mormongirlz.com * twitter.com/mormon_girlz * mormon-girlz.tumblr.com

11-03-2015, 01:17 PM	#3
skirtcake Registered User Industry Role: Join Date: Jul 2014 Location: SLC Posts: 95	Yep, on it. And I'm not sure what cloudflare plan I will use. Haven't done it yet. Recommendations? __________________ * mormongirlz.com * twitter.com/mormon_girlz * mormon-girlz.tumblr.com

11-06-2015, 11:04 PM	#4
pornsprite Confirmed User Industry Role: Join Date: Dec 2009 Location: Texas Posts: 1,643	I like the concept __________________ Go Fuck Yourself

11-07-2015, 03:10 AM	#5
j3rkules VIP Industry Role: Join Date: Jul 2013 Posts: 22,104	Any site can be hacked if enough time and effort are put in. Therefore, your site security also needs to address the need to backup your site to be able to recreate it. To remove your site from what hackers consider "Low Hanging Fruit" do the following: No usernames should be admin and no passwords should be similar to the site name or have dates associated with you personally. Keep Wordpress, your plugins and your theme updated to the newest versions. Turn off comments completely. This is optional but strictly for site security, it is preferable. Be sure you are backing up your site frequently as well. __________________ How To Build A Porn Site And Make Money \| My Best $$$ Cam Sponsor 3 Top Adult Hosting Providers

11-16-2015, 04:59 AM	#6
nightslit Confirmed User Industry Role: Join Date: Oct 2013 Location: France Posts: 226	If you are using wordpress I recommend WordFence and also to relocate the login page (all cms are having the same url structure). Then I would also change all passwords/usernames. Another thing to do is setting up cloud fare as you mentionned, the détails for each plan are on their website. But even normal (free) plan are more secure as all traffic il filtred a minimum. Then why not looking into the connection logs (in your cpanel) and see what ip adress caused this? Then blocking the ip will be simple.. (or the domain/internet seller). __________________ email: [email protected] email me for link trades/hardlink exchanges ICQ : 665974711 my sites: http://hardcoreteenfuck.com

10-15-2016, 03:31 AM	#7
marlboroack So Fucking Banned Industry Role: Join Date: Jul 2010 Location: ☣ Posts: 9,327	Hire a security team

11-29-2016, 12:32 PM	#8
ketheriel Registered User Industry Role: Join Date: Nov 2016 Location: Aveiro, Portugal Posts: 8	Being attacked is one thing, being owned is another; While DDoS/DoS can be countermeasured by your operator and as a last line of defense, yourself (or your bofh), being owned usually means someone exploited your code either through SQL injection or other security vulnerability. Finding the full extent of an infiltrated server can take some time and is a very demanding task. There are scripts which might work up to a point, but usually the diagnosis and post mortem are done with the file system on read only and by comparing the hashes of the files with a network copy/backup. While I might help this one time for the fun of it (assuming it's a POSIX compliant system), I won't fix other peoples code. Message me if you want my skills on this one!

01-05-2017, 03:04 PM	#9
nosaint Confirmed User Industry Role: Join Date: Jan 2017 Posts: 29	I don't think you can track them down just because they attack your website. They usually do this using lots of other hacked sites/servers. Probably you could track them only after being hacked if they are stupid enough to leave any traces. But, the questions is... what does "seriously attacked" means? Is it a DDOS attack? Then it means they simply want to disrupt your services. That is usually the competition. Are they trying to find exploits? Are they trying to access your admin area using a dictionary attack?

01-05-2017, 03:22 PM	#10
j3rkules VIP Industry Role: Join Date: Jul 2013 Posts: 22,104	11-03-2015 This is an old thread. Why you even respond to that? __________________ How To Build A Porn Site And Make Money \| My Best $$$ Cam Sponsor 3 Top Adult Hosting Providers

01-05-2017, 03:33 PM	#11
bns666 Confirmed Fetishist Industry Role: Join Date: Mar 2005 Location: Fetishland Posts: 11,473	probably to reach 30 posts so he can post urls __________________ ⭐ CAM SODA ⭐ STRIPCHAT ⭐ ⭐ CHATURBATE ⭐ SKYPE SEX CAMS ⭐

02-21-2017, 11:43 PM	#13
yuu.design Too lazy to set a custom title Industry Role: Join Date: Mar 2006 Location: Argentina Posts: 25,924	sad to hear __________________ Beautiful And Usable Web Design Creations For The Adult Industry Since 2003 I'm Yuu, Designer and Content Producer Paysites - Affiliate Programs - Dating & Cam Sites - Mainstream Projects - Tube Sites - Banners - Wordpress Themes - NATs integration - Landing Pages Check my Portfolio and Content Production Offers

03-08-2017, 08:22 AM	#15
Duckers Confirmed User Industry Role: Join Date: Dec 2016 Posts: 30	that's funny

04-05-2017, 09:19 AM	#16
gamejump Registered User Industry Role: Join Date: Sep 2011 Posts: 31	see even the wordpress are gets hacked you have not mentioned on which cms your site is