Announcement

Collapse
No announcement yet.

Forum hacked, version 4.0.6 Patch Level 4

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • [Forum] Forum hacked, version 4.0.6 Patch Level 4

    Hello,

    Just found this morning that my forum was hacked. All IP's in "who is online" point to one and the same IP-address: 194.1.150.194
    The last registration attempt comes from this IP. From what I can remember few days ago someone with the same email address was trying to register from a Russian IP address.

    I am using the advanced IP manager as well as the stop forum spam addon - I banned the initial IP address from registering.

    Can anyone help please.
    Thanks
    Peter

  • #2
    You will need to give more details of which way your forum was hacked. Also if possible upgrade to the latest version as your version has known security issues. the above ip address is from global gold, a vbulletin hosting company.

    Comment


    • #3
      I am hosting my site with Globalgold.

      My paid license has expired, so I have no access to later versions.

      Which additional information is required?

      Comment


      • #4
        In what way was your forum hacked?

        Comment


        • #5
          Each visitor shows up with the same IP address in who is online.
          Thanks

          Comment


          • #6
            Ban that ip address in .htaccess and then what happens?

            Deny from 194.1.150.194

            Is he just hammering your server and not hacking you?
            FTW Forum <- Home of the damned!

            Comment


            • #7
              This particular IP is banned from anything.

              Comment


              • #8
                If it was in your .htaccess i would have thought it would not show on your who is online page.
                If you have and if it is then thats weird as hell.
                What evidence beyond the ip in who is online do you have of a hack mate?
                Just asking to try understand whats going on.
                Is there any logs to show access from that ip? Which appears to be your host oddly enough.
                FTW Forum <- Home of the damned!

                Comment


                • #9
                  You need to talk to your host about this issue as it is there ip address that is causing the issue.

                  Comment


                  • #10
                    GlobalGold is apparently having issues like this at the moment, see this other thread.

                    Comment

                    widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
                    Working...
                    X