V/Bulletin Getting hacked

I've got a small how-to that can be of some help in the future for you:

https://vborg.vbsupport.ru/showthread.php?p=877421

[lightwave]

^Thanx Chris
Im Installing it.

[davidw]

Also, try ensuring SSH and telnet are disabled.

[Freesteyelz]

Enable SSH only when needed is a good rule.

[Ntfu2]

how are you going to enable SSH only when you need it? wouldnt it be disabled when you go to turn it back on

[Freesteyelz]

Alright, I could have explained it better. Anyway...

I use WebHost Manager to set the permissions. There's an option to enable and disable SSH. Unless I'm using it it's set to disable.

If you do leave SSH up, change it to a random high numbered port. I have tons of generic blanket attacks in my logfiles of people trying to SSH in as things like 'root' 'admin' 'administrator' etc on port 21.

[Paul M]

Port 21 is FTP, did you mean Port 22 which is SSH.

[filburt1]

Originally Posted by Ntfu2

how are you going to enable SSH only when you need it? wouldnt it be disabled when you go to turn it back on

CPanel or asking your host, I would assume.

But lightwave, the best way to protect your forums: you are currently showing up as unlicensed. To be able to download hacks and/or receive support here at vBulletin.org, we ask you to please click here (vB-germany users click here) and enter your email address, to show us that you are licensed.

You will need to use your customer number and password (which will be in the email you got when you paid for your license) to access that page. Please note that your email is case sensitive. The update of your account may take up to one hour.

Thank you.

[Brandon Sheley]

maybe you can post a list of hacks installed.

maybe it's a mixture of the mods and hacks, I'm sure some are exploitable