Please do not try by yourself the links ;-) Le dimanche 05 décembre 2004 à 20:59 +0100, Frederick Ros a écrit : > Benoit Audouard wrote : > | Hi, > | The forum was defaced at 13:42 today... > | a nasty cracker replaced erased index.php at root of > | http://forum.eagle-usb.org > | with an index.html like this one : > | > | http://forum.eagle-usb.org/index_cracke.html > | (contains only text) > > OK. I just quickly looked at the logs: > > At 13:42 : [snip]
> Nice one isn't it ? By chances they only did a rm *index* :) > The other fact is that the source address seems to originate directly > from brasiltelecom.net.br ... > > I'm going to send a mail to brasiltelecom abuse service ... perhaps they > will have enough log to find this out ... yep, blocking one IP may not be suficient though, for example if they are using an anonymous proxy... blocking more IP would not be a solution either :-( we have users in Brazil too @++ Ben'. aka baud123
