Puppy Linux Discussion Forum

glassparrot

As of 19:05UTC on Sunday November 8th, someone has redirected http://www.puppylinux.org to a page of porn.

nitehawk · Joined: 13 Apr 2008 Posts: 351 Location: Florida, USA

Geez,...you're right !

James C · Joined: 26 Mar 2009 Posts: 1171 Location: Kentucky

Still hacked.

Screenshot of the hacked page....

REMOVED BY ADMIN - Porn

puppyite · Posted: Sun 08 Nov 2009, 16:01 Post_subject:

I just sent Raffy a PM but as he is in the Phillipines it may be hours before he gets my message.

I will see if I can contact hostgator or whoever the registrar is about action on this crime.

01micko · Posted: Sun 08 Nov 2009, 16:04 Post_subject:

I tried to get a screeny but my browser was locked from the crap, some albanian mob.

puppyite · Posted: Sun 08 Nov 2009, 16:21 Post_subject:

I have contacted Barry and security@hostgator.com about this crime.

Caneri · Joined: 04 Sep 2007 Posts: 1231 Location: Canada

There was a break in attempt here as well
http://69.174.102.38/

This is the old server for puppylinux.ca but we run Hiawatha...thankfully!!

If you have downloaded from this server PLEASE do not upload anywhere and run a virus scanner before you unpack anything from above.

I have totally shut down the virtual machines so there is no access but my front page was borked around noon my time.
Eric

James C · Joined: 26 Mar 2009 Posts: 1171 Location: Kentucky

Now you get this.......

glassparrot · Posted: Sun 08 Nov 2009, 16:38 Post_subject:

And it's morphed into a thing that is being used by a group of folks who look like Albanian racists. I always find it fascinating that people around the world are really engrossed with their own local controversies. To watch the news in the Usa, or read the blogosphere here, you'd think that the entire world revolved around us.

Caneri · Joined: 04 Sep 2007 Posts: 1231 Location: Canada

Just for sanity.

The files from puppylinux.ca and puppylinux.asia are secure.
We have a plan so nothing to worry about with the files from the above repos.

What a pain in the arse!!
Eric

puppyite · Posted: Sun 08 Nov 2009, 16:50 Post_subject:

I just saw this at pupplinux.org: logasc.txt Which is this:
71.228.250.244 ## c-71-228-250-244.hsd1.tn.comcast.net ## ## __utma=93050780.28546175.1255801892.1257134397.1257217412.19; __utmz=93050780.1255801892.1.1.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=puppy%20linux; SESS7120f286a26c92bb897bf92271a27fd4=62af600f40eeb732e05c020ca791d7b5 ## en-us ## Apple-PubSub/65.11 ## Sun 08 Nov, 2009 2:37 pm

That IP is hosted by: Comcast Cable Communications, Inc. JUMPSTART-5 (NET-71-224-0-0-1) 71.224.0.0 - 71.239.255.255
Comcast Cable Communications, Inc. NASHVILLE-20 (NET-71-228-192-0-1)
71.228.192.0 - 71.228.255.255

I will be reporting that IP to abuse @ comcast if that's who is behind this and if I can find out who to report it to.

puppyite · Posted: Sun 08 Nov 2009, 17:02 Post_subject:

Eric,
See below and then upload site files.

From: tickets@hostgator.com
Subject: Update to Ticket ID: QCL-12679636
Date: Sun, November 8, 2009 2:45 pm
To: puppyite

I've removed the hacked page from your account. It looks like the hackers moved
your site files to the "thisisalbania" directory in your home directory. Do you
have a backup of this site? I'm scanning the account for viruses now.

Regards,
Patrick Harrison
Network Security Administrator
HostGator.com LLC
http://support.hostgator.com

Your feedback is extremely important to us. Please rate this response at the URL below:
http://tickets.hostgator.com/rateticket/ redacted by puppyite
To reply to this ticket, please be sure to email 12679636@tickets.hostgator.com from
the email address you created the ticket with.

glassparrot · Posted: Sun 08 Nov 2009, 17:06 Post_subject:

Yay! Thanks puppyite.

Caneri · Joined: 04 Sep 2007 Posts: 1231 Location: Canada

Just to be clear,

The .ca and .asia files are on a completely different set of servers and where NOT hacked.

I don't run puppylinux.org and .org doesn't host iso files as far as I know.

The main repos are still clean from where I can see things.
Eric

puppyite · Posted: Sun 08 Nov 2009, 17:14 Post_subject: