Community Forums

Important Notice:

Two sections of this forum are available only to registered customers. In order to receive access to the Customer Forums and ResellerCentral Forums, you must first register on these forums or login to your existing forum account. If you are an existing HostNine customer, be sure to register using the email address on file for your billing profile.

Go Back   HostNine Community Forums > H9 Company Announcements > General Announcements

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 11-24-2009, 01:56 PM
H9Alex's Avatar
H9Alex H9Alex is offline
HostNine Support
 
Join Date: Jan 2007
Location: Jupiter
Posts: 1,148
Default FTP passwords

Today we just found over 25+ accounts running perl scripts spamming.


These where ALL uploaded by ftp.

Example 1
Nov 24 10:35:16 nodexx pure-ftpd: (xxxxxxx@xxxxxx) [NOTICE] /home/xxxxxx//public_html/tjcdn.pl uploaded (30812 bytes, 462.52KB/sec)


Example 2

Nov 24 12:50:54 nodexx pure-ftpd: (xxxxxx@xxxxxxxxx) [NOTICE] /home/xxxxxx//public_html/cgi-bin/sif.
Nov 24 12:50:56 nodexx pure-ftpd: (xxxxxx@xxxxxxxxx) [NOTICE] Deleted /public_html/cgi-bin/sif.pl
Nov 24 12:50:56 nodexx pure-ftpd: (xxxxxx@xxxxxxxxx) [INFO] Logout.



This is not a server exploit this is your account/computer being hacked. They have your password so odds are it's something you downloaded/got via a virus.



I URGE ALL CUSTOMERS to update all passwords right now due to this.


AGAIN this is not us but a virus that you have causing it.


I have suspended ALOT of accounts. If I didn't email you it's not on purpose I am trying to keep track of these with Blake as we speak so we can contact EVERYONE.
__________________
Alex
Hostnine Support

*********Important Links************
Helpdesk: http://support.hostnine.com/
Blog: http://www.hostnine.com/blog/
Forums: http://forums.hostnine.com/
********************************
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
passwords without locking a whole directory groverjarrett General 1 05-16-2008 07:45 AM
passwords not_me Reseller Hosting 2 11-23-2007 11:19 AM


All times are GMT -5. The time now is 07:13 PM.


Powered by vBulletin® Version 3.8.6
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.

Host Nine

Our mission began in 2006. Thousands of awesome clients later, we are now one of the most popular hosters in the world.
Most of this is because of our fantastic support. Join us, you'll be glad you did - that's a given.