Has anyone recently been hacked? My site was hacked by "Irtibat: Cyber-Man(at)hotmail.com.tr" and I'm trying to figure out how they did it.  I was running DNN version 05.06.00.  (I'm installing 05.06.02 right now).  My host is also using II6

Any ideas?  There was a cyber.html, he.html and modified Default.aspx (on my root directory).

s Sebastian said, FTP could be the way they accessed to your accounts. I recently detected massive connections to my FTP servers trying to break my servers.



My FTP servers are configured to refuse access from an IP if 5 failed logins are detected



However, this will depend on your hosting features to set specific security meassures.



Complex and long passwords are the best options. Also, if your server allows that, then you can enable Secure FTP (SSL or TLS)

---

Locopon
Free modules: E-commerce, Complete localization (Portal, page, module settings, skins, etc.), Secure Login, and more
http://dnn.tiendaboliviana.com

Hi,

Once you secured FTP/IIS write access to your DNN files, you may have look at our firewall module to further protect your instance.
The free version includes several security rules:

• Restrict critical account login to trusted locations (e.g by IP ranges or private aliases)
• Enforce caps on request rates to prevent Oracle padding or Denial Of Service attacks.
• Detect multiple connections to prevent identity theft

That helps mitigate the security vulnerabilities from earlier versions.

Regards

---

Jesse CTO - Aricie