today i went over to check up on my site www.fiveacehosting.net and found it had been hacked. Some kind of code called "hackers code":

| Saudi Arabia Hacker|

root@server1 [~]# id
uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(di sk),10(wheel)
Hacked By
HaCKeR CoDe & NAHM HAC
# I do What I Say #
Oops I Don't care
to contact: j6t@hotmail.com & rq1@hotmail.com

Anyone know what to do? i can easily reupload the index.html file but it could get hacked again

Secure it.

change your passwords and reupload your site
Check your html code to make sure no other odd codes

Originally Posted by chrishirst

Secure it.

Hehe lol. Never thought of that . I backtraced the server and looked at everybody elses sites on the server. Seems everyone is hacked

I take you are suddenly finding out that "hosting" is a little bit more involved than paying for a VPS/Dedicated server and reselling the space.

Do you give SSH access to your clients?

Chris. Please i do no what im doing. Every post you try and make me look like an idiot. I know how to provide hosting to my clients. I have 4 servers in a datacentre for space reselling. They all have secure firewalls etc. This server is one i was on when i first started out. Its frm someone greek off ebay. And i couldnt move away because fiveachosting and all the important files are on there. As far as i know the bloke that owns the server does not give SSH access

Originally Posted by fiveacehosting

Anyone know what to do?

Dump Windows immediately - it's dangerous! Move to linux, then nothing could go wrong. Everybody knows Windows is the only software that's ever been hacked.</rant>

Originally Posted by Learning Newbie

Dump Windows immediately - it's dangerous! Move to linux, then nothing could go wrong. Everybody knows Windows is the only software that's ever been hacked.</rant>

You're just saying that cause you work with Microsoft Databases!

I wrote it for a reason: http://www.webmaster-talk.com/web-ho...secure-it.html

Chris. Please i do no what im doing.

Frankly, you can't really say "i do no what im doing" and start a thread like this one. If you know, you don't need to ask.

As far as i know the bloke that owns the server does not give SSH access

So, you have a reseller account there? Have the Greek guy help you out. Looks like it's a job that he should be handling.

Hmm.... These guys seem to be becoming more present. They hit one of my hosting clients websites a while ago.

yes. The server is Unix and i have a reseller account there. I do know what im doing when its my server. The reason i kept the reseller account is because it has my main site on it

Originally Posted by fiveacehosting

yes. The server is Unix and i have a reseller account there. I do know what im doing when its my server. The reason i kept the reseller account is because it has my main site on it

What web application had been hosted there? I have to say that such things might happen due to the holled web applications or if you are using not last version of it. Check that

The answer is simple - If it's not your server, you can't do much.

Originally Posted by andrei155

The answer is simple - If it's not your server, you can't do much.

But that is server web site is hosted on and you need to be in a hurry and do everything possible to improve that situation

Originally Posted by Learning Newbie

Dump Windows immediately - it's dangerous! Move to linux, then nothing could go wrong. Everybody knows Windows is the only software that's ever been hacked.</rant>

Much as I'd love that to be true, it isn't.

Actually I learned linux admin as a direct result of my collocated server being hacked! That was a long time ago, many years.

But it's true, hacking is probably a lot easier and common on windows since

1. most developers (including hackers) hate windows,
well okay, a LOT... i have no data to prove "most"
2. way more people know how to develop for windows

but people who hack for profit will of course target linux since the people who make the most money nowadays are the oldschool developers not the liquidity-driven tech-illiterate chaps and lasses... thanks to the bank-crash and so forth. (and you see people who have absolutely no idea what they're doing but just pour money into a business to make it grow - they tend to almost ALL go for windows, whereas people who can think and use brains and stuff... they will choose a platform according to utility, and sometimes the best choice is windows, sometimes it's linux) hell, there is even a surge in macintosh hacking.

as for the saudi arabia thing at the top - i think that this indicates the hacker was probably american - it's rather an artificial flag to put up there, and if it were far eastern or russian in origin they would prefer you know where they came from

as far as i am aware there are only 2 computers in all of saudi arabia, and both of them are used for instant messaging direct to the white house.

In a direct answer to your question, first, update all software on your site and keep it updated.

Second, change all your passwords. If everyone on that server has been hacked, then it's probably more of an OS issue or something common across all hacked sites on that server.

Third, have you examined the logs? Can you pinpoint when it happened? Does that time correlate to any other events recorded in the logs?

agree with wewatch. Having updates version of all software is very important. Most of the time hackers get access to servers that run old version of software or are vulnerable to some kind of attack. As for your host, email them or open a support ticket and tell them to update Mysql, apache or whatever the curcial software they use to host sites.

Also, look in the logs, it will provide you with valuable information to trace down the hackers.

Why don't you upload the website to your own server - where you "do no what your doing"