D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] website

 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I have concluded my initial analysis.

Fairly confident I know the extent of the abuse, and have identified
all the IP addresses used during the abuse. Does appear to originate
with weak or compromised user password.

Recreating the site will have to wait till the morning.

There are a couple of parts I can't investigate easily as the files
have been removed, or corrupted.

I can restore to November 1st backup. Or we can rebuild the site from
trusted code. I'd prefer the former, since it is safest, but either
option will work.

Paul?
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
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=zijy
-----END PGP SIGNATURE-----

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq