[liberationtech] Help- Website hacked

[SiNA]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

~$ nslookup yemen4all.com
Server:        8.8.8.8
Address:    8.8.8.8#53

Non-authoritative answer:
Name:    yemen4all.com
Address: 69.167.136.126



Seems like it could have been a Joomla site, on shared hosting:
http://yemen4all.com/administrator/

~$ whois 69.167.136.126
Liquid Web, Inc. LIQUIDWEB-9 (NET-69-167-128-0-1) 69.167.128.0 -
69.167.191.255

http://www.liquidweb.com/ They should still have backups!

- --
SiNA
pgp 0x0B47D56D



On 07/19/2011 11:23 AM, Peter Thoenen wrote:
>> The Yemeni Revolution website, www.yemen4all.com was hacked by
>> unknowns about two hours ago. Is there a way to get the website
>> back without losing its content?
>
> Restore from tape _______________________________________________
> liberationtech mailing list liberationtech at lists.stanford.edu
>
> Should you need to change your subscription options, please go to:
>
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>
> If you would like to receive a daily digest, click "yes" (once you
> click above) next to "would you like to receive list mail batched
> in a daily digest?"
>
> You will need the user name and password you receive from the list
> moderator in monthly reminders.
>
> Should you need immediate assistance, please contact the list
> moderator.
>
> Please don't forget to follow us on
> http://twitter.com/#!/Liberationtech
>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=PwjT
-----END PGP SIGNATURE-----

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20110719/d652de0d/attachment.html>