[PLEASE HELP] Stollen My Database And Threatning to Steal my Site

mmmxiv

New Member
chakru said:
I reported his url to pirate reports lol..

Rofl, quality.

Also, you guys are saying everything I would've said, which is;

Report to piratereports (if hes a hacker, i doubt he has a legit vB)

Report to his hosting as people have said

Hes emailing your members, you email them back, using the inbuilt feature in vBulletin, tell them that the new domain is a hacker and ask them to all change their passwords.

Your database will be useless in his hands, he can get shut down for using one that isn't his property anyway.

Take out his nameservers, no nameservers, no site.
 

Ab.Nath

New Member
thanks everyone for the help

but some questions can't i do anything that no one can access my database
moreover can't i add any kind of feature so that even if he uses my database it will of no use to him

he is accessing my site
i added the ip deny thing
i have reported his site i pirate reports

is there any way i can secure my site funny anything that i can do
help please
 

Ob3lix

New Member
did you try to log on his forum and prune it?? He will install the database again but that was just fun. We had the same situation few years ago on warez-hr.org.

The guy made a true mirror forum and e-maild all the users several times, but he didn't change two of the admin's pass so after few months as that mirror forum made (a life on it's own) we pruned it. The main purpose of that mirror forum was selling and that's the reason they hacked us so I don't think your situation is different.

My suggestion is that you change all the passes that count - admins, mods, and smods - and keep your forum distinguished. what the hell do you worry. :D
 

mmmxiv

New Member
log into his site thats using your DB and you'll be an admin, at this point, you should have superadmin access, so you can screw him over
 

Ab.Nath

New Member
no i am not able to do that

but not that my forum is loaded in a sub directory of that forum

meaning /forum_73

Like that
i have changed the admincp and modcp address and changed it

What more should i do

Also how will i add a htaccess password in those folder
those folders are visted by my admins (2) of them and supermods (4)

and modcp accessed by mods (6)

how will i make the .htaccess password so that we all can enter the site freely
 

Ab.Nath

New Member
i installed vb firewall 1.0 and this is in that logfile_worms.txt


PHP:
1||1237042427||120.28.64.69||return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1461-priva-interracial-anal.html||http://www.xxxxxx.com/login.php?return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1461-priva-interracial-anal.html||Mozilla/4.0 (compatible; MSIE 5.0; Windows 95) Opera 6.01  [en]
1||1237042813||194.8.75.191||return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1464-olivia-treville-strassen-der-lust.html||http://www.xxxxxx.com/login.php?return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1464-olivia-treville-strassen-der-lust.html||Mozilla/4.7 (compatible; OffByOne; Windows 2000) Webster Pro V3.4
1||1237056210||24.167.128.11||return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1461-priva-interracial-anal.html||http://www.xxxxxx.com/login.php?return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1461-priva-interracial-anal.html||Mozilla/4.61 [en] (X11; U; ) - BrowseX (2.0.0 Windows)
1||1237059003||66.249.73.209||tag=http%3A%2F%2Fmembers.ten.com%2F||||Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
1||1237059781||122.121.134.218||return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1461-priva-interracial-anal.html||http://www.xxxxxx.com/login.php?return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1461-priva-interracial-anal.html||Mozilla/4.0 (compatible; MSIE 5.0; Windows 95) Opera 6.01  [en]
1||1237070496||66.249.73.209||tag=http%3A%2F%2Fwww.goocumshots.com%2Fmembers||||Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
1||1237071888||66.249.73.209||tag=http%3A%2F%2Fwww.bustydreams.com%2Fmembers||||Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
1||1237072811||80.53.28.138||return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1461-priva-interracial-anal.html||http://www.xxxxxx.com/login.php?return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1461-priva-interracial-anal.html||Mozilla/3.0 (compatible; WebCapture 2.0; Auto; Windows)
1||1237072913||79.44.235.63||tag=http%3A%2F%2Fmembers.suckmydicknow.com%2Fmembers%2F||http://www.xxxxxx.com/adult-pay-sites-reviews-and-passwords/14735-http-members-suckmydicknow-com-members.html||Mozilla/5.0 (Windows; U; Windows NT 6.0; it; rv:1.9.0.4) Gecko/2008102920 Firefox/3.0.4
1||1237120958||213.227.243.147||return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1461-priva-interracial-anal.html||http://www.xxxxxx.com/login.php?return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1461-priva-interracial-anal.html||Mozilla/0.6 Beta (Windows)
1||1237146693||79.111.142.184||return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1461-priva-interracial-anal.html||http://www.xxxxxx.com/login.php?return=/submit.php?url=http%3A%2F%2Fwww.xxxxxx.com%2Fguest-downloads%2F1461-priva-interracial-anal.html||Mozilla/2.0 (compatible; MSIE 3.02; Windows CE; 240x320)

www.xxxxxx.com = Is my Address

Who is doing this , can it be stopped
 

moiz615

New Member
You got his whois, call him, threat him and abuse him. Nothing else possible. If you are having your own thing Illegal. How could you go to court. At my case my domain was not being transferred and same illegal case. While a solid email to him from my side changed everything.

He knows you are from somewhere you live he doesn't knows your friends are in England(Suppose). England anti piracy rules are strict black mail being an officer fake identity and ask him to shut his website.
 

myosh

New Member
Quiet annoying, eh?
Anyway, I think a real hacker will not let you know when he want to do something crazy to your website. The hacker must be a generous hacker :)

Change your admin CP - I think I saw this tutorial somewhere, can't remember though.
 

sahil3x1

New Member
i got email to i am member of ur site ............
but he say we are moving but not permanent
i think he is only ur staff member who has admincp access ok
tell me you have backup sql from admincp
please with staff whom u gave full admincp access
100% he done .......
 

Ab.Nath

New Member
hahahaha :) they are using the our database

no worries
just switch to my site only
the original one

and ignore the email
thanks
 

litu2009

New Member
That Is also Happens To My Forum But He/she Can Not Use My database He just Hacked By Password and and demoted my other account which has admin power and i am also banned ( For Testing ) a user and he was unbanned him and make him smod after that i said my Hoster ( From Whome I get my domain and space ) He said me do not worry u installed it again or changed the user id at config.php

Ok And About You I think you did not give him ur cpanel because If You Make Him Admin In your Forum with all power then he can take backup of your database because any admin ( with all power ) can get a backup of you database so next time if u make any one admin then try to give less power except Mentenance ( If you Give this power any one can get your database backup ) And also do not give the power that he can moderate your forum because in many forum i saw that after the user get his own forum or getting experince he or she was opened his own forum and delete all the data from old forum where the user have more power and make some spam threds that join this site when you go to that site you will find there is many post which was also copied from your post.

So Be Care Full to give power to admin

If Do Not Mind Can I get Your Forum Url By PM Or Just add me at your MSN Or Yahoo @

If any MOD or ADMIN Think that it is against the rule that a person was giving his email id openly then they can delete this
 

maester

New Member
Dont feel bad my site was taken over and still is even the cpanel was taken over so its happening to alot of people lately.
 

Ab.Nath

New Member
yes :)

ucenik1 said:
i can ddos hes site! if you want!

No Need But Thanks

The main thing is : -

He can steal My Database , even can create a hundred sites like mine , but 1 thing it cannot do , is take the site popularity and our members devotion

thats all
also i have done major changes after that thing happened hope it gets all ok
 

JontyM

New Member
Good Luck. A site I was moderator on got hacked, and all they did was backup the database and remove all admins but the root admin.

I suggest you are the only admin.
Create Ranks like Sub-Admin which have a bit more priveledge than super moderators but not panel access.
With panel access people can exploit there way into maintenance tools & take a backup.
 

Ab.Nath

New Member
yes i have got that idea

not that was not the reason the reason was this : -
after much time i solved ( with my staff)

i installed msqldumper
which i used it to restore my database once but i did not create directory protection
when i had a problem

that hacker ( not really) just got to know about it and then he just downloaded my database backup
and thus getting my backup

now i have added directory protection and also added msql deny manager which is a new system
also i did many stuff in my admincp
changed much settings and all

hope this gets good , stopping all fuckers to stop this
@Ab.Nath
 
Top