Jump to content


Photo

Under attack

Started by Stan , Oct 23 2010 11:58 PM

  • This topic is locked This topic is locked
29 replies to this topic

#1 Stan

Stan

    Webmaster

  • Webmaster
  • 6,911 posts
  • Gender:Male
  • Location:Vaals - Nederland

Posted 23 October 2010 - 11:58 PM

Emergency-planet.com is currently under attack

As some of you might have noticed, the site was down for some hours some hours earlier today. Die is due tot he fact that some people or a group is/are currently trying to get brute-force access to our server, I was able to restore all of the crashed databases and was able to reset the server successfully after 3 retries.

I currently know that damage to our OS has been done since we are not able to successfully perform any updates to our system at current time.

The bad thing is, I have no fix for this yet. The good thing is, I know who is behind it and was able to contact his/her provider. Ia m currently awaiting feedback from that provider.

Kind regards,
Stan
Webmaster & Technical Support

#2 rafnancy

rafnancy

    Lieutenant

  • Members
  • 39 posts

Posted 24 October 2010 - 01:35 AM

Can You tell us who did it and why ?

#3 SleepyLizard

SleepyLizard

    Captain

  • Members
  • 205 posts
  • Gender:Male
  • Location:The eye of the storm

Posted 24 October 2010 - 01:36 AM

Are our accounts and information safe?
"The internet makes it possible to obtain any information known to man within seconds but we'd rather just update our facebooks."

#4 Guest_Francis_*

Guest_Francis_*
  • Guests

Posted 24 October 2010 - 02:42 AM

Can You tell us who did it and why ?


No. That's a private information.

Are our accounts and information safe?


Everything is safe, except email addresses and usernames, if they wanted to check them. But I doubt they downloaded a copy of the database only to see the email addresses. Don't worry. :gut:

#5 Grim_Wizard

Grim_Wizard

    Battalion Chief

  • Members
  • 636 posts
  • Gender:Male
  • Location:Tidewater Virginia
  • Interests:The one and only spooky firefighter

Posted 24 October 2010 - 05:04 AM

Stan I may have had something to do with this (Not in a bad way of course) but... I'll check but a long time ago like a year ago, I got a PM by a deleted user, at first they were "Help me help me" and then it turned to flame. Appearently someone used my username (GerardTIII) and went into a hack group and pissed them off really bad, gimmie a sec I'll check my disposable email and the forums where they used to be.

But a brute force attack vs. a server was their calling card or some crap.

EDIT: I can see no clear evidence but it's higly likely. Or just someone else.
I thought what I'd do was pretend I was one of those deaf-mutes.

#6 FDNY Squad 55

FDNY Squad 55

    Senior Captain

  • Members
  • 460 posts
  • Gender:Male

Posted 24 October 2010 - 07:42 AM

Sorry to hear it... for several hours when trying to log had a bad feeling :mellow:
Signature removed by staff for not complying with the signature rules.
More on signature rules can be found here.
Feel free to remove this message once your signature is compliant!

#7 Stan

Stan

    Webmaster

  • Webmaster
  • 6,911 posts
  • Gender:Male
  • Location:Vaals - Nederland

Posted 24 October 2010 - 08:08 AM

Since they don't have and will not be able to get access to the server they do not get anything that's on the server. Simple as that :) Passwords are not weak at all here :) Beside that the only thing they try to brute force at this time is my SSH account but well I rised security and disabled all SSH accounts now :)

This means all information is safe. All they can do is overload the server.
Webmaster & Technical Support

#8 SleepyLizard

SleepyLizard

    Captain

  • Members
  • 205 posts
  • Gender:Male
  • Location:The eye of the storm

Posted 24 October 2010 - 02:38 PM

Good to hear! Thanks for the update!
"The internet makes it possible to obtain any information known to man within seconds but we'd rather just update our facebooks."

#9 Grim_Wizard

Grim_Wizard

    Battalion Chief

  • Members
  • 636 posts
  • Gender:Male
  • Location:Tidewater Virginia
  • Interests:The one and only spooky firefighter

Posted 24 October 2010 - 02:50 PM

Our password hashes are salted right?
I thought what I'd do was pretend I was one of those deaf-mutes.

#10 Guest_Francis_*

Guest_Francis_*
  • Guests

Posted 24 October 2010 - 03:05 PM

Our password hashes are salted right?


IPB's password hash:

$salt = md5("some string here" . strtolower($username . $password) . md5(rand(1000000, 9999999));
$passwordHash = md5(strtolower($username . $password) . "(some string here, depends)" . $salt));


I may have missed something though. I haven't checked in years.

#11 Stan

Stan

    Webmaster

  • Webmaster
  • 6,911 posts
  • Gender:Male
  • Location:Vaals - Nederland

Posted 24 October 2010 - 10:41 PM

Our password hashes are salted right?


I remember having answered you that question already some time ago but anyways: Their goal is absolutely not to get your account information, which is of zero interest for anyone.
Webmaster & Technical Support

#12 Multibullets

Multibullets

    Captain

  • Members
  • 206 posts
  • Gender:Male
  • Location:Nijmegen

Posted 25 October 2010 - 11:38 AM

Why would they want to do that anyways? Do you have any idea what their goal is?

Maybe it's 4Chan demanding Hoppah to make a new LA mod :grinsevil:

#13 Voodoo_Operator

Voodoo_Operator

    Chief Insanity Officer

  • Pastamaniac
  • 617 posts
  • Gender:Male
  • Location:That place where they invented poutine
  • Interests:Bacon
    Raw Meat
    Gold paint

Posted 25 October 2010 - 03:19 PM

Maybe it's 4Chan demanding Hoppah to make a new LA mod :grinsevil:


Unless the LA mod was made of underage porn, it's unlikely.
"I like to picture Jesus in a tuxedo T-Shirt because it says I want to be formal, but I'm here to party."
-Cal Naughton Jr.

#14 Guest_Francis_*

Guest_Francis_*
  • Guests

Posted 25 October 2010 - 03:44 PM

Unless the LA mod was made of underage porn, it's unlikely.

Congratz, you made me lol in my classroom. :D

#15 Grim_Wizard

Grim_Wizard

    Battalion Chief

  • Members
  • 636 posts
  • Gender:Male
  • Location:Tidewater Virginia
  • Interests:The one and only spooky firefighter

Posted 25 October 2010 - 07:47 PM

Congratz, you made me lol in my classroom. :D


And myself just now, BTW Voodoo, you owe me a new computer monitor, mine is now covered in chocolate milk.
Also @stan, yeah I remember asking, I just didn't feel like looking back or doing a wire shark to find out.
I thought what I'd do was pretend I was one of those deaf-mutes.

#16 USAFFireFighter

USAFFireFighter

    Firefighter

  • Members
  • 22 posts
  • Gender:Male
  • Location:Fort Collins, Colorado

Posted 26 October 2010 - 06:59 AM

I have also received a few emails saying help me and so on..... by deleted members and or guests
SrA EMMONS 153 MSF/CES-CEF UNITED STATES AIR FORCE
Fire Fighter 2, HazMat Tech, ARFF, D/O Structural Pumper, D/O Mobile Water Supply, D/O ARFF, EMT-B,

#17 pyrofreak

pyrofreak

    Senior Captain

  • Members
  • 348 posts
  • Gender:Male

Posted 27 October 2010 - 02:42 AM

It seems more and more common anymore. Just last week Sony said they were delaying games so they could patch the game and prevent piracy. In the same week I noticed two or three sites I visit normally were attacked directly, or had their databases attacked. Ah ... the world we live in.

#18 Newfoundking

Newfoundking

    The Real Slim Shady

  • Moderator
  • 7,253 posts
  • Gender:Male
  • Location:Newfoundland

Posted 27 October 2010 - 03:25 AM

some people think by attacking websites, they will get back at publishers for delaying games, or they'll reach the system and get to the game to play it for free and before hand just like in the movies...

They're stupid. Anyone that tries to hack a site for a reason like that is plain out stupid.

Wanna play multiplayer without any of the commitment? Emergency Planet hosts casual multiplayer to all its members! Contact me for more information

 

Executive Director: EMP Gulag

 

Do you have a warning that you want to go away, or are you facing another punishment you don't want? Contact me for the NEW alternative!

#19 Xplorer4x4

Xplorer4x4

    Assistant Chief

  • Members
  • 4,972 posts
  • Gender:Male
  • Location:Evansville,IN

Posted 02 November 2010 - 02:08 PM

But I doubt they downloaded a copy of the database only to see the email addresses. Don't worry. :gut:

They might. They can sell that list to companies to harvest for spam bots. Seen it done before.

Please DO NOT PM ME for help. Ask your questions on the forum to help others with the same issue.

Enhance your LA Mod Freeplay Experience with LA Mod 2.0 4x4 Submod.
MyDfQUt.jpg

Los Angeles Mod v2.0 4x4 W00ds Map v1 - BETA RELEASE

If you appreciate my work, then please donate. Every little bit helps!
btn_donate_SM.gif

#20 matte31

matte31

    Battalion Chief

  • Members
  • 714 posts
  • Location:Sweden

Posted 03 November 2010 - 02:18 AM

Everything is safe, except email addresses and usernames, if they wanted to check them. But I doubt they downloaded a copy of the database only to see the email addresses. Don't worry. :gut:

So you mean that "the hacker" got everyones email? They can be used for spam mail etc.
Member since 12 Sep 2009.
Back to News & Announcement


  1. International Emergency & 911: First Responders Fan Forum
  2. → Site Related
  3. → News & Announcement
  4. Privacy Policy
  5. Forum Rules ·