Including PowerScan, a porn-scanning bot. These apps apparently just walked through the firewall and installed themselves right through the Apache server. It's the only port open, or at least I think it is - I'll have to do quite a bit more checking.
I just got a new router/firewall - if this happened since then, these guys are super-alert (except for the fact that there's not much to steal on my web site). Man, these hacks are incredible.
Anyway, I don't trust the server any more, and I'm going to have to bring it down and reformat its disk before I bring it back. If I'm hosting images for you, they'll be off for a few days.
I just got a new router/firewall - if this happened since then, these guys are super-alert (except for the fact that there's not much to steal on my web site). Man, these hacks are incredible.
Anyway, I don't trust the server any more, and I'm going to have to bring it down and reformat its disk before I bring it back. If I'm hosting images for you, they'll be off for a few days.
Comment