Seems someone has "hacked" our server and shut it down.... - Mustang Evolution

Go Back   Mustang Evolution > Off Topic Forums > The Bar



Reply
 
Thread Tools Search this Thread
Please support our sponsors and let them know you heard about them here!
Old 04-21-2004, 04:50 PM   #1
Registered User
Regular
 
Brent's Avatar
 
Join Date: May 2003
Region: Tennessee
Posts: 11,873
Seems someone has "hacked" our server and shut it down....

Looking at our event logs someone manually shut down our server at 10:08 last night. We are looking into it further but that was the reason for the down time.

We apologize for any inconvience this has caused.
__________________

Reddit
Brent is offline   Reply With Quote
Sponsored Links
Advertisement
 
Old 04-21-2004, 04:51 PM   #2
Legacy Member
Legacy
 
Seph's Avatar
 
Join Date: Dec 2003
Location: California
Region: California
Posts: 908
must have been Shahrum and his vengance for his birthday story shinanigins
__________________
-Patrick
http://home.socal.rr.com/sephiros/images/NewBan.jpg

Christopher Reeve - Even though I don't personally believe in the Lord, I try to behave as though He was watching.
Seph is offline   Reply With Quote
Old 04-21-2004, 07:06 PM   #3
Ken
Legacy Member
Legacy
 
Ken's Avatar
 
Join Date: May 2003
Region: New Hampshire
Posts: 1,350
I was wondering when somebody would comment on why the freaking site was down all day!
__________________
Can't afford Mods? Go To College!
Ken is offline   Reply With Quote
Sponsored Links
Advertisement
 
Old 04-21-2004, 07:10 PM   #4
Registered Member
Regular
 
Join Date: Jul 2003
Region: California
Posts: 574
Who hacks a server to shut it down?

Nobody.
Laser02 is offline   Reply With Quote
Old 04-21-2004, 07:24 PM   #5
Legacy Member
Legacy
 
Falcon's Avatar
 
Join Date: Oct 2003
Region: Michigan
Posts: 1,438
Send a message via AIM to Falcon Send a message via MSN to Falcon Send a message via Yahoo to Falcon
Weird i wonder why someone would wanna do that????

off topic but..nice sig ken...jeep lesbo?
__________________
-Derek
1999 Trans Am WS6
Full Stainless Magnaflow Exhaust, Stainless Longtubes/Off Road Y-Pipe, QTP E-Cutout, HP Tuners, Super Sucker Ram Air Kit, BMR Tunnel Brace/Driveshaft Safety Loop, Hotchkis Panhard Bar, Hypertech 160 Thermostat, CF Whisper Air Lid, Corvette FRCs, K&N, !AIR, !EGR
Falcon is offline   Reply With Quote
Old 04-21-2004, 07:46 PM   #6
Zim
You want to **** me?
Legacy
 
Zim's Avatar
 
Join Date: Jun 2003
Location: Kansas City
Region: Missouri
Posts: 4,043
Quote:
Originally Posted by Laser02
Who hacks a server to shut it down?

Nobody.
what the **** are you saying? that he turned it off? enough with your worthless posts, they get really ****in old. I went down to the office today and manually turned it back on, so the site was off... but why the hell would one of the people that runs it just shut it down.

they wouldnt.

god damn you piss me off a lot man
__________________

I like toys
Zim is offline   Reply With Quote
Old 04-21-2004, 07:50 PM   #7
Registered Member
Regular
 
Join Date: Jul 2003
Region: California
Posts: 574
Someone call the waaaambulance.
Laser02 is offline   Reply With Quote
Old 04-21-2004, 07:55 PM   #8
Zim
You want to **** me?
Legacy
 
Zim's Avatar
 
Join Date: Jun 2003
Location: Kansas City
Region: Missouri
Posts: 4,043
Quote:
Originally Posted by Laser02
Someone call the waaaambulance.
am i whining? no. Am I tellling you to knock off your "3.8 attitude"? yes i am. Quit with your whitty un-needed remarks and I'll be happy.
__________________

I like toys
Zim is offline   Reply With Quote
Old 04-21-2004, 07:59 PM   #9
Registered Member
Regular
 
Join Date: Jul 2003
Region: California
Posts: 574
You are just mad because I called you a dumbass for recklessly driving and then looking for sympathy.

Get over it. I am.
Laser02 is offline   Reply With Quote
Old 04-21-2004, 08:01 PM   #10
Zim
You want to **** me?
Legacy
 
Zim's Avatar
 
Join Date: Jun 2003
Location: Kansas City
Region: Missouri
Posts: 4,043
Quote:
Originally Posted by Laser02
You are just mad because I called you a dumbass for recklessly driving and then looking for sympathy.
wtf are you talking about? i dont care who tells me im a dumbass... thats not what gets to me. What gets to me is your attitude for things. Just do yourself a favor and knock off the attitude.
__________________

I like toys
Zim is offline   Reply With Quote
Old 04-21-2004, 08:02 PM   #11
Registered Member
Regular
 
Join Date: Jul 2003
Region: California
Posts: 574
I don't know what you're talking about. I have a fantastic attitude.
Laser02 is offline   Reply With Quote
Old 04-21-2004, 08:03 PM   #12
Zim
You want to **** me?
Legacy
 
Zim's Avatar
 
Join Date: Jun 2003
Location: Kansas City
Region: Missouri
Posts: 4,043
keep it that way
__________________

I like toys
Zim is offline   Reply With Quote
Old 04-21-2004, 08:04 PM   #13
Registered Member
Regular
 
Join Date: Jul 2003
Region: California
Posts: 574
I love you, Zim.
Laser02 is offline   Reply With Quote
Old 04-21-2004, 08:49 PM   #14
Registered User
Regular
 
Brent's Avatar
 
Join Date: May 2003
Region: Tennessee
Posts: 11,873
I love you to zim
__________________

Reddit
Brent is offline   Reply With Quote
Old 04-21-2004, 08:49 PM   #15
Registered User
Regular
 
Brent's Avatar
 
Join Date: May 2003
Region: Tennessee
Posts: 11,873
but someone did turn off the server. Someone logged in through remote desktop and shut down the server. AS the Event Viewer tells alot
__________________

Reddit
Brent is offline   Reply With Quote
Old 04-21-2004, 08:50 PM   #16
Registered Member
Regular
 
KrazyPony's Avatar
 
Join Date: Jul 2003
Region: South Carolina
Posts: 800
feel the luv !
__________________
http://i201.photobucket.com/albums/aa307/KrazyPony/KrazyPonysigBlue.jpg
KrazyPony is offline   Reply With Quote
Old 04-21-2004, 09:37 PM   #17
Registered Member
Regular
 
Join Date: May 2003
Region: New Hampshire
Posts: 386
Send a message via AIM to Smokedya95stang
calm down boys.

Brent, find out the IP, or location, generally you can when people log into servers.
__________________
-Charles
Smokedya95stang is offline   Reply With Quote
Old 04-21-2004, 10:14 PM   #18
Registered Member
Regular
 
Join Date: Jul 2003
Region: California
Posts: 574
I still doubt it was hacked.

It was probably someone who doesn't know how to log out of RDP properly.
Laser02 is offline   Reply With Quote
Old 04-21-2004, 10:32 PM   #19
Registered User
Regular
 
Brent's Avatar
 
Join Date: May 2003
Region: Tennessee
Posts: 11,873
Quote:
Originally Posted by Laser02
I still doubt it was hacked.

It was probably someone who doesn't know how to log out of RDP properly.
We dont use windows Remote Desktop. No one that has access to the server uses that. So if they logged on through Windows Remote Desktop then they shouldnt have been on in the first place.
__________________

Reddit
Brent is offline   Reply With Quote
Old 04-21-2004, 10:33 PM   #20
Registered Member
Regular
 
Join Date: Jul 2003
Region: California
Posts: 574
You shouldn't have Terminal Services enabled if nobody uses it.

How could they get your admin password? If they cracked it, it must have been pretty weak.
Laser02 is offline   Reply With Quote
Old 04-21-2004, 10:35 PM   #21
Registered User
Regular
 
Brent's Avatar
 
Join Date: May 2003
Region: Tennessee
Posts: 11,873
Quote:
Originally Posted by Laser02
You shouldn't have Terminal Services enabled if nobody uses it.

How could they get your admin password? If they cracked it, it must have been pretty weak.
Well all the passwords have been changed regardless and the server was shut down manually by someone. How or why they did it I dont know and probably never will.
__________________

Reddit
Brent is offline   Reply With Quote
Old 04-21-2004, 10:48 PM   #22
Registered Member
Regular
 
KrazyPony's Avatar
 
Join Date: Jul 2003
Region: South Carolina
Posts: 800
Need to install a screen capture program on there to take snap shots of the activity being done every 30min/hrly or so you see fit, and can capture logins and capture the registry incase its changed at all during this time frame, and if its mallicious activity you should be alerted or the system locks down right away...

not sure what software might do this, I remember yrs ago IBM had a software that was similar to this...

or maybe NAV Internet Security wouldnt be a bad purchase or find ( Brent knows what I mean ).
__________________
http://i201.photobucket.com/albums/aa307/KrazyPony/KrazyPonysigBlue.jpg
KrazyPony is offline   Reply With Quote
Old 04-21-2004, 10:51 PM   #23
Registered Member
Regular
 
Join Date: Jul 2003
Region: California
Posts: 574
You can't use screen capture with RDP on a Terminal Server. It's run in a separate session.
Laser02 is offline   Reply With Quote
Old 04-21-2004, 10:53 PM   #24
Registered Member
Regular
 
KrazyPony's Avatar
 
Join Date: Jul 2003
Region: South Carolina
Posts: 800
Quote:
Originally Posted by Laser02
I still doubt it was hacked.

It was probably someone who doesn't know how to log out of RDP properly.
Its very easy to say this and say that after it happens, but you all should be taking notes from what you do find out, called learning from lack of security practice, and limit the users that may log onto the server.

When I did IT Security at one place whenever someone logged onto the server for any maintenance or what have ya, the admin p/w would get changed by the master admin, and would not be revieled until it was needed the next time...

kinda like the keeper of keys, dont take security lightly when it comes to what you work so hard at such as this forum Brent and the other admins involved!

- Jeff
__________________
http://i201.photobucket.com/albums/aa307/KrazyPony/KrazyPonysigBlue.jpg
KrazyPony is offline   Reply With Quote
Old 04-21-2004, 10:54 PM   #25
Registered Member
Regular
 
KrazyPony's Avatar
 
Join Date: Jul 2003
Region: South Carolina
Posts: 800
Quote:
Originally Posted by Laser02
You can't use screen capture with RDP on a Terminal Server. It's run in a separate session.
They are not using RDP via TS, they are using another method...so lets lose the almighty RDP knowledge here ok!

I respect your knowledge here Laser, but not knowing how the functions all work on that certain server will get misguided info...
__________________
http://i201.photobucket.com/albums/aa307/KrazyPony/KrazyPonysigBlue.jpg
KrazyPony is offline   Reply With Quote
Old 04-21-2004, 11:06 PM   #26
Registered Member
Regular
 
Join Date: Jul 2003
Region: California
Posts: 574
Unless they are running the RDP Host on an XP PRO workstation, they are using Terminal Services. And yes, I have almighty knowledge regarding Terminal Services.
Laser02 is offline   Reply With Quote
Old 04-21-2004, 11:10 PM   #27
Registered User
Newbie
 
Join Date: Apr 2004
Posts: 0
Send a message via AIM to chrischarlesshighfriend
I AM HACK YOUR FACE
__________________
I love pot.
chrischarlesshighfriend is offline   Reply With Quote
Old 04-21-2004, 11:24 PM   #28
Registered User
Newbie
 
Join Date: Apr 2004
Posts: 0
Send a message via AIM to chrischarlesshighfriend
Mustang Forumss - HACKED!
Attached Thumbnails
Click image for larger version

Name:	DCP03807.JPG
Views:	87
Size:	41.8 KB
ID:	649  
__________________
I love pot.
chrischarlesshighfriend is offline   Reply With Quote
Old 04-21-2004, 11:24 PM   #29
Zim
You want to **** me?
Legacy
 
Zim's Avatar
 
Join Date: Jun 2003
Location: Kansas City
Region: Missouri
Posts: 4,043
LOL!!! nice
__________________

I like toys
Zim is offline   Reply With Quote
Old 04-22-2004, 12:10 AM   #30
Legacy Member
Legacy
 
Thomas91169's Avatar
 
Join Date: Sep 2003
Region: California
Posts: 2,280
Send a message via AIM to Thomas91169
once again the comedian strikes.
__________________
-Thomas-

1998 Eclipse GST Spyder - 14b turbo | 3" Catback | Evo8 BoV | 170fwhp if that

2003 Redfire Cobra - 448whp/435wtq - Sold
Thomas91169 is offline   Reply With Quote
Old 04-22-2004, 06:47 AM   #31
Registered Member
Regular
 
KrazyPony's Avatar
 
Join Date: Jul 2003
Region: South Carolina
Posts: 800
Quote:
Originally Posted by Laser02
Unless they are running the RDP Host on an XP PRO workstation, they are using Terminal Services. And yes, I have almighty knowledge regarding Terminal Services.
Actually it is running on a Win2003 Server, not XP Pro
__________________
http://i201.photobucket.com/albums/aa307/KrazyPony/KrazyPonysigBlue.jpg
KrazyPony is offline   Reply With Quote
Old 04-22-2004, 08:04 AM   #32
Registered Member
Regular
 
Join Date: Jul 2003
Region: California
Posts: 574
Really? Imagine that. And you know what Windows Server 2003 runs to support Remote Desktop? TERMINAL SERVICES.

Jesus.
Laser02 is offline   Reply With Quote
Old 04-22-2004, 08:45 PM   #33
Registered Member
Regular
 
KrazyPony's Avatar
 
Join Date: Jul 2003
Region: South Carolina
Posts: 800
yeah it sure does, I just chose on my server not to subscribe and run it as a TS, stupid subscriptions...

there are cheaper and easier ways of doing thngs than doing it all msft's way!

PRICEY BASTURDS!
__________________
http://i201.photobucket.com/albums/aa307/KrazyPony/KrazyPonysigBlue.jpg
KrazyPony is offline   Reply With Quote
Old 04-22-2004, 09:43 PM   #34
Registered Member
Regular
 
Join Date: Jul 2003
Region: California
Posts: 574
You're right about being pricey. But it's a good product. I believe you get like 5 licenses with Windows 2003 Server for remote administrative access. I've got it on probably 40 servers and 20 workstations.

I've got VNC on a lot of my old NT4.0 servers. It's free, but the display is a little choppy.
Laser02 is offline   Reply With Quote
Old 04-22-2004, 09:45 PM   #35
Registered User
Regular
 
Brent's Avatar
 
Join Date: May 2003
Region: Tennessee
Posts: 11,873
Yea vnc is what we use.
__________________

Reddit
Brent is offline   Reply With Quote
Reply

Lower Navigation
Go Back   Mustang Evolution > Off Topic Forums > The Bar

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Set of 4 Craftsman Quick Release Ratchets: 1/4", 2x 3/8", 1/2" fast64 Mustang Parts for Sale and Wanted 1 11-02-2009 01:31 PM
MTI RACING "Extreme Velocity" 454 "Southern Stingray" C6/Z = Awesome JROC Pictures and Videos 10 10-26-2007 04:33 AM
w0000ttt!!!!! got something today (starts with "s" ends with "upercharger") fast64 Pictures and Videos 37 02-22-2005 06:52 PM
"V6stangs" Castle Wolfenstein Server.... informati Brent The Bar 81 01-15-2004 07:32 PM

» Like Us On Facebook



06:01 PM


Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Content Relevant URLs by vBSEO 3.6.0

MustangEvolution.com is in no way associated with or endorsed by Ford Motor Company.