PostNuke

Flexible Content Management System

News

Recent Nuke Hacks and How to Stop Them

Contributed by Anonymous on Oct 12, 2001 - 09:22 PM




the .htaccess file reads like this:




Order Deny,Allow


DENY from 66.21.117.


DENY FROM .ummah.net


DENY FROM 217.173.64.


ALLOW FROM ALL




This will stop the current round of Tzunami attacks on nuke sites... he copies your config.php to the images dir as a text file as well... he does create a few other files in the images dir -- so, for those who were hacked, my condolences - hope y'all appreciate the fix... and know that this grey hat is working with the fbi in resolution and information sharing. -- so, please, share your logs with the proper people if you fell victim to this, it is important.
976