[pbb76]

Over the last week, my server has been attacked a couple of times. I have mainly dynamic CMS sites on the server and have tried all I can to secure them using the usual sorts of protection and patching vulnerabilities in PHP etc.

But I just feel so stupid and so useless. I dont know who would want to attack me (or why) - does anyone else get this happen too them and how do you deal with it?

[MH-Nick]

Chances are these attacks won't be targeting you personally, but will be completely automated.

To what extent is your server being hacked? And what damage is being done (if any)?

[pbb76]

Well my own business site was hacked over the weekend and my site was meta redirected to a page with an abusive message on it. Then just general attacks to gain access to databases.

Just feels very personal, but as I say, I have never crossed anyone in 12 years of doing this

[web-itec]

pbb76, on 16 June 2011 - 08:28 PM, said:

Well my own business site was hacked over the weekend and my site was meta redirected to a page with an abusive message on it. Then just general attacks to gain access to databases.

Just feels very personal, but as I say, I have never crossed anyone in 12 years of doing this

how "often" is this? if its often and youve changed your password for the server(assumingly), then its most likely automated(aka unlikely personal) OR you have a bad file on your server, check all the directorys for any odd files or other pages that may have had something changed on it then if it happens again just up your security

[rshosting]

Just wish to confirm, is it the entire server being hacked, or your particular websites?

If its entire server being hacked, chances are, server has been compromised and needs attention. If it just your websites being hacked, then it is probably because of some vulneribility with the cms that you are using. Though you mentioned, you have applied patches etc.. I would also suggest you to check that no files or folders exist with 777 permissions.

[UK Web hosting]

If you are using Cpanel Linux server I will suggest you to install Suphp, and modsec to avoid such attacks on php applications.

[timtamboy63]

A few questions.
On your server, have you got a sysadmin? Tell him to check the firewall logs, and make sure csf is installed. If it isn't, fire him. If you don't have a sysadmin, hire one, or learn to secure your server properly.

Also, are you sure it's your server being hacked, not your website? You say you've secured everything, but how good are you at securing?

[SniderDK]

Hmmm I don't often do this, actually ive never given security work away but i also have empathy for how powerless it must make you feel, PM me some contact info (skype,gtalk or email) if you like and i will help you out for free... i wont be offended if you don't take the help of someone random

I try not to expose my identity on here but will via private communications so you can check me out make sure im good and all that

also... im in and out at the moment so might not reply right away