Search results

So... The custom hooks theory: " its not hook related... [GVH] doesn't use any custom hooks"  

WHMCS was contacted this morning and basically hasn't a clue.  Unsure what we are collectively looking at.  My guess would be injected WHMCS install - as in something injected rogue. Script or config...  But that's 100% speculation on my part. I got those captures directly from GVH administrators. 

You aren't going to see this over on that Lowendshit site :) 1 more coming.

Other IP doing similar activity:

I can confirm some of what happened and purely from WHMCS logging. 2 IPs at Amazon poked something somewhere in WHMCS.  This fired off a bunch of email/password activity.  Picture is worth a 1000 words, so screencap time:

Thank you much @alexvolk! I see nothing in there about passwords or any relationship. Normally folks bury this stuff behind HTACCESS or firewall rules or similar, right? Thanks Ald.

So delving slightly off topic here... There was a WHMCS link posted to IRC earlier.  Rogue-Oktay posted and asked people to ping it... Some did/looked and bunch of background crap happened. Growl. cron.php To those of you familiar with such / with installs... Can you access this file from...

Hard to say what happened, cause they don't know :) I know from talking with GVH folks overnight, that no one with credentials did anything to generate said emails about passwords.  Obviously, someone over there ought to be preserving all logs and manually going over things looking for the...

Lucky you :) There may be more emails..  Again, no one is sure and gets goofier (like person above with no relationship to GVH).

WTF, you actually gave away prizes? I thought you had contests and either 1. Gave the prizes to your friends or 2. Never issued them due to external folks being ahh, not up speed/interested... Ba-dum! another LET joke. Congrats to everyone who participated and to the winners.  Was an...

Hard to say since these would get queued by Mandrill and may blow time gaps away or elongate artificially. Know I heard someone say they just received one of those PW reset emails in past hour... About 6 hours into this by my estimate.

They use Mandrill to send emails BTW. Curious about never being a customer.  Perhaps some other reason to be in their database?  Ticketing?  Sale lead? Appears 6 emails were sent to each customer/email address.

Yeah, how about I buy your site :) ?

My picks: Running haveged to enhance your system entropy by @wlanboy Using SSHFS to share folders among your VPS by @ PetaByet V1 by @Nett  

Thank you for this :) I'd like to know how in the fnck: 1. Backupsy gets to 59... maybe I failed to count something, by the I doubt it... If anything, Backupsy was look at a points loss (see Jack's 3 points to Oktay's brands).   Mind you nothing against them,  next go round let's all vote for...

Meh! Filtering at that location also? Unsure why folks are all going NYC loco lately.  ATL is kind of close network wise. Me I just worry about dilution of RamNode (more problems, more things to babysit and tend to, and overall wide spread of Nick and staff).

Yeah, my team may have fat fingered a vote or two.  Not like we have a Top 3 accounting firm guaranteeing the results in sunny Buffalo. As far as being the "real one", it's the internet cousin. http://www.google.com/search?q=%22dr.+mike%22  900k like matches there alone...

The original Scranton Burst DC was amply low end / ghetto.... Should give it a look on Google Maps Streetview....  Random HVAC intrusions, building to the alley,   wood fencing along the roof....  jabroni's out front playing home remodeler...  Go back in the alley there for a good time. Yeah...

Buffalo.

I see that bandwidth used.. 12.xTB last month... We need to increase that.   like 8% utilization.   Quit slacking.