Someone is attempting to hack into my forum

[Brianman908]

Hi, my forum link is www.our4tnz.com Someone came onto my forum on a guest board and started insulting us and when I banned his IP he got on on a proxy server and started saying he was going to hack into my forum. Here is the link to the topic where he said he was going to hack.

http://www.our4tnz.com/t4777p30-hi-guests

Here are some of his messages quoted

"Anybody worth banning will evade it."

- z33

Anyways, Brianman is a humorless [Language] who felt like banning me. I'm trying to get Slowloris to work, but it's written in Perl (*gag*). If there's an option to change the HTTP header message, I'll be sure to set it to "Your extra-large Dead [Language] has arrived. That will be $5."

Just for you guys.

Slowloris is the best denial-of-service tool of all time. Back before I left 4chan, I actually managed to convince all of /b/ to use it in place of LOIC and HOIC in Op9gore.

Slowloris is fantastic because as long as the attacking machine is still kicking, it will be holding sockets from valid users. My server can whore about 300 sockets before it runs out of memory. The defending server will put up a fight, but Slowloris will slowly and surely win.

HTTP headers are the head part of an HTTP packet. When Slowloris is stopped, it sends as many 200 OK headers as sockets it has absorbed.

I need to make sure this guys doesn't hack my forum. Can anyone here help me. Also, I have his IP address, the one he originally used, and have his ISP and other stuff from it. Should I report this guy?

[Brianman908]

I need someone's help here soon people. I cannot wait til tomorrow. This guy is trying to hack my forum now

[Sir Chivas™]

They can't hack your forum. They need access to the Admin Panel. Ip-ban them, then change the new accounts activation to Admin (ACP >> Users & Groups >> User's Options >> New accounts activation : ADMIN).

Read this topic before anything happens: https://help.forumotion.com/t75418-my-forum-was-hacked (That's if something happens, you'll know what to do).

[Brianman908]

They can't hack your forum. They need access to the Admin Panel. Ip-ban them, then change the new accounts activation to Admin (ACP >> Users & Groups >> User's Options >> New accounts activation : ADMIN).

Read this topic before anything happens: https://help.forumotion.com/t75418-my-forum-was-hacked (That's if something happens, you'll know what to do).

Are you sure that they cannot hack into the forum without the admin panel access? What is slowloris? Do you know what they're trying to do with that? The new accounts activation is set to admin. He was posting as a guest as I have a forum for guests to post on. I have ip banned him, and he changed his ip. I banned the new ip as well as the proxy server he attempted to use. How can I ban a host name? If I ban his host name will he not be able to get on with a new IP?

I contacted his ISP and they told me to call my ISP about it. Should I do that?

[Sir Chivas™]

---

Since they have told you to contact his ISP, then you should. You can also make a group were he doesn't have any what so ever permission to the forum. You can keep on placing him there.

---

Edit: Read this topics as well:
https://help.forumotion.com/t93972-someone-may-be-planning-to-hack-my-forum?highlight=hack
https://help.forumotion.com/t95367-is-it-possible-for-someone-to-hack-and-destroy-a-forum?highlight=hack

---

[TyManGFx]

Hey bro acctivate my account

[Brianman908]

Hey bro acctivate my account

Who are you?

[TyManGFx]

i wanna join so i can chill..... i need a site where i can go and chill
My name on there is TyManGFx

[Ape]

You say he was using a guest Account right ?

Well make it so you members have to log in to post and guests can not post at any time
If this guys making accounts make sure you ban the Email address aswell as IP and username


The member / Guest can not enter our servers to hack your Forum and if he / she Don't have your Admin Account info then he /she can not do anything bad to your site.
As you know we don't even have the rights to the servers so how can they ?


If he she has a rolling IP address (proxy server) then you should not find the host there running from so you can not report them to there ISP but if there Host comes up ban the ip Host for 24hrs ok this may block other members but it will stop him / her


Ape

[Brianman908]

Forget it.

Does anyone know what to do about slowloris?

[TyManGFx]

Brian acctivate my acc and ill research on it.... cuz i think lil [bad word] dont have a life when they do that stuff its pointless and mean

[Darren1]

Hi,

Click to read:

Trust that your ForuMotion forum is secure, and we have many protection systems in place to prevent any DDOS Attacks from harming you, or your forums


Thank you,
Darren.

[Brianman908]

You say he was using a guest Account right ?

Well make it so you members have to log in to post and guests can not post at any time
If this guys making accounts make sure you ban the Email address aswell as IP and username


The member / Guest can not enter our servers to hack your Forum and if he / she Don't have your Admin Account info then he /she can not do anything bad to your site.
As you know we don't even have the rights to the servers so how can they ?


If he she has a rolling IP address (proxy server) then you should not find the host there running from so you can not report them to there ISP but if there Host comes up ban the ip Host for 24hrs ok this may block other members but it will stop him / her


Ape

He has used a proxy server and his real IP and I've banned them both. How would you find the hostname to ban it?

One of my fellow admins knows about slowloris, the tool he is using, and said that it wouldn't give him access but would restrict ours. How can I prevent this? Should I just call my ISP like his ISP had said to do?

[TyManGFx]

here u go man
http://ha.ckers.org/slowloris/
http://hackaday.com/2009/06/17/slowloris-http-denial-of-service/

[Brianman908]

Hi,

Click to read:

Trust that your ForuMotion forum is secure, and we have many protection systems in place to prevent any DDOS Attacks from harming you, or your forums


Thank you,
Darren.

THANK YOU!

That is probably the most helpful post I've ever gotten on here. Do you know about slowloris, the tool he is using?

If he can't hack into my forum but does manage to block my access from it, what should I do then? How can that be fixed?

[PriincessBrittany]

Brian he might be nice, you could give him a chance

[Darren1]

slowloris (Which I know very little about) may attempt to log into all accounts, but it cannot prevent the founder from logging in via the utilities, so if you can't log in via the forum, simply go to the utilities page (Linked in my post above) or, in the footer of our forum

Also, anyone who says they "will hack you" is someone who is trying to scare the daylights out of you, they probably wont even attempt to, stress less...it's bad for you. Seriously.

I'm here to help with the more serious, and not so serious issues, I'm more then happy to help out too

[TyManGFx]

So bro please activate my account

[Sir Chivas™]

Trust that your ForuMotion forum is secure, and we have many protection systems in place to prevent any DDOS Attacks from harming you, or your forums

Also, anyone who says they "will hack you" is someone who is trying to scare the daylights out of you, they probably wont even attempt to, stress less...it's bad for you. Seriously.

Very true. Forumotion, can't really be hacked. They will reset the Password and everything, simply a backup. Easy as cake.

[Brianman908]

slowloris (Which I know very little about) may attempt to log into all accounts, but it cannot prevent the founder from logging in via the utilities, so if you can't log in via the forum, simply go to the utilities page (Linked in my post above) or, in the footer of our forum

Also, anyone who says they "will hack you" is someone who is trying to scare the daylights out of you, they probably wont even attempt to, stress less...it's bad for you. Seriously.

I'm here to help with the more serious, and not so serious issues, I'm more then happy to help out too

So does that mean he could log into my account with slowloris?

I believe he is attempting to, as he said he was running slowloris.

Suddenly the number of guests we had on went up from like 10 to 40. Does that have anything to do with him?

[Brianman908]

So bro please activate my account

My site's got a lot of young people on it. You probably wouldn't like it anyway

[Sir Chivas™]

No, since you have placed your forum's link here. A lot of members and Guest click on your link. Well, that's if it happen before you created this thread.

[TyManGFx]

My site's got a lot of young people on it. You probably wouldn't like it anyway

yo i am young im only 16 XD

[Brianman908]

No, since you have placed your account here. A lot of members and Guest click on your link. Well, that's if it happen before you created this thread.

I'm not sure if it came first or after

[PriincessBrittany]

We're not that young Brian. I'm almost 14.

[TyManGFx]

Freshman Brittany?

[Darren1]

TyManGFx, Please stop requesting activation, take it to PM's.
PriincessBrittany, please discuss that in PM's.
Thanks.

Chivas, nothing is not able to be hacked, everything can be hacked (Even red lights on thee roadway!), you just have to find the way. We also have some "seriously tough stuff" to prevent any hacking

As for guests numbers, it is possible, but then again, it could be your promoting work simply paying off. There's no way to tell.

[Sir Chivas™]

I'm not sure if it came first or after

Well that's a problem then. But I think it's because you placed your forum link here.


@Darren1: Well I know that my friend, my I'm not trying to scare the kid.

[PriincessBrittany]

Darren- I can't pm I'm on my iPod. I'll get his email.

TyManGFx, not yet, next year! What's your email?

[TyManGFx]

E-Mail Removed: Don't post your e-mail in a post.
~Rideem3