Database Hacking

[AllenFromStacysmom]

Hey, guys.

My server was running very well, until those 4 hackers got on my server, I detected and banned them very quick.

Then one guy joined back in, asked me to unban his friends and try to scare me by saying attacking the server, and of course I said no, and banned him too.

After someone name Bye Bye server try to join, I banned him before he could join.

Then just in case, I went to check my database and my server files on FTP. I use Vilayer so I backup all my database on the FTP.

And yeah, they did something. They drop my whole database and deleted all the Database backup.

 

Lucky, I have a database backup on my computer. 

I changed all my password for database and Rcon, but is there a way to change the password for FTP?

And just for the future, what should I do when under such a hacker attack?

 

Thank you :)

[Draay]

Wow, that is CRAZY.

When you bought the server, did the host give you a default password?
If so change it to something more secure. Some hosts give you really unsecure passwords but it's down to you to change it.
If there is a pattern with these passwords and they know about it, they may be able to break in.

 

Other than that, no idea. But i would talk to the host about 30 min backups or something.

[RimBlock]

Make sure you are not using your MySQL Admin account for Epoch.  Make a specific MySQL account with basic commands only (Select, Insert, Update, Delete).  Lock it down so you can only access the MySQL server from a specific server (Your Epoch server) and possibly your home machine if you have a static IP address.

 

First thoughts are that they accessed your FTP account, downloaded your HiveExt.ini and used the MySQL account details in it to drop the DB etc. 

 

If you are not able to create the MySQL accounts or lock them down then speak to your hosting provider, they should be able to help.