Attacked! What now? - 07/24/2005 9:27 PM
Hi--
My Board was attacked this weekend. My question is what do I need to do ***immediately*** to give me time to figure out what to do for a more permanent fix?
Threads version: 5.4.4php (I have yet to migrate to UBBThreads)
Discovery: I tried to login and my password had been changed.
Damage found so far: All Categories were renamed to "Admin - Lamer.Vladi - Rulezzz"
Clue: I have a new user registered 3 days ago, username Vladi.
Actions taken so far: banned username Vladi. Ran a site backup.
Is there a way I can tell what his ip address was? He made no posts under this username. I suspect banning him as a user is not much protection, so I would at least like to ban his ip host, pookmail.com, at least until I can figure out if this is the culprit. Not much protection because he probably has many e-mail addresses, even if he were to use a real one.
What else can I do short term to protect things?
Any advice as to a long term solution?
Thanks for your help!
My Board was attacked this weekend. My question is what do I need to do ***immediately*** to give me time to figure out what to do for a more permanent fix?
Threads version: 5.4.4php (I have yet to migrate to UBBThreads)
Discovery: I tried to login and my password had been changed.
Damage found so far: All Categories were renamed to "Admin - Lamer.Vladi - Rulezzz"
Clue: I have a new user registered 3 days ago, username Vladi.
Actions taken so far: banned username Vladi. Ran a site backup.
Is there a way I can tell what his ip address was? He made no posts under this username. I suspect banning him as a user is not much protection, so I would at least like to ban his ip host, pookmail.com, at least until I can figure out if this is the culprit. Not much protection because he probably has many e-mail addresses, even if he were to use a real one.
What else can I do short term to protect things?
Any advice as to a long term solution?
Thanks for your help!