DAM Offline - ELS got an RPC hack onto the server

[arthurhh]

Some evil little sod targeted me with RPC hack, I had missed disabling a feature on the server and it got me

Well I wonder how quick I can rebuild it, or recover it but as it was an exe infector I figure its dead. Setup and sites are of course all backed up but a rebuild of OS/Apache?PHP/MYSQL/Pearl etc takes time

[TokWW]

Sorry - Not me - (I'm not normally evil...) but man - such an inconvenience! No chance of knowing the IP? I spose it was just a dynamic one anyway

Yes, they make things/systems so flexible that there are often too many things to to get wrong... or forget about. Better luck next setup!

[Grant]

The NZW server is constantly getting port scanned. It looks like one of the new scripts that has been added is encouraging them. LFD is currently bouncing the IP's and the host says they have locked everything down.

Mainly coming from russian IP addresses

[arthurhh]

Back on line, not too bad an effort.

It was my mistake I know better (or should) and left an RPC open that is normally targeted by these ELS

Just as well I had taken a drive image very recently (yeah I know thats cheating but it beats a rebuild from the ground up)

[TokWW]

Well done! All three Tokoroa sites on line for good now!

Backups huh? Imaging software - let it take its time in the background, its valuable later on.

Perhaps I speak too soon - I'm next to have a problem...