Skip to main content PSA: Check your git server if containing O/O repos, it happened again in recent days : r/selfhosted Create Create post Open inbox Go to selfhosted r/selfhosted โข 1y ago XLioncc PSA: Check your git server if containing O/O repos, it happened again in recent days r/selfhosted - PSA: Check your git server if containing O/O repos, it happened again in recent days
Original title: My Gitea (Forgejo) got hacked - some strange user, a very large repo
I didn't getting hacked, but I got weird email from [email protected], and it containing weird symbols and every new paragraph has different URLs, and almost of them are web page archive that containing the web pages for similar things, some are git server repos.
After some research, I found an old Reddit post that exactly describing this behaviour. u/Meshyai avatar Meshyai โข Ad So I came back to Meshy after months away and... what happened? The mesh quality is actually insane now. So I came back to Meshy after months away and... what happened? The mesh quality is actually insane now. So I came back to Meshy after months away and... what happened? The mesh quality is actually insane now. So I came back to Meshy after months away and... what happened? The mesh quality is actually insane now. meshy.ai Sign Up Sort by: Comments Section thundranos โข 1y ago
Ah ok, so this didn't happen to you?
Either way, if this is a private server, it shouldn't be exposed to the internet. If you are hosting a server for others to use, then this is an administrative issue. Hopefully everyone reads the docs and takes the steps to harden their server.
Thanks for the post! u/XLioncc avatar XLioncc โข 1y ago
This is not happened to me
The biggest problem is they didn't disable account registration. thundranos โข 1y ago
Do you have other people using your server as well or is this a private instance? u/XLioncc avatar XLioncc โข 1y ago
I "saw" other people encountered this
https://www.google.com/search?q=inurl%3AO%2FO%2Fsrc%2Fbranch u/DontBuyMeGoldGiveBTC avatar DontBuyMeGoldGiveBTC โข 1y ago
What a weird dude. Why would he email you? Lol. Teabagging. u/XLioncc avatar XLioncc โข 1y ago
He send to multiple people, I think it is crawled online. thundranos โข 1y ago
How did they get access to your git server? u/XLioncc avatar XLioncc โข 1y ago
I think they didn't disable account registration function. u/SirSoggybottom avatar SirSoggybottom โข 1y ago
They? You mean, you (the original poster) didnt disable it?
If so, then how is that a actual problem worth posting a "PSA" to everyone here?
Whats next? Dont use 12345 as your password, PSA? ... Catch my drift? u/JSouthGB avatar JSouthGB โข 1y ago
I believe OP is sharing info about what has happened to others. Not what happened to them personally. u/XLioncc avatar XLioncc โข 1y ago
Yes u/SirSoggybottom avatar SirSoggybottom โข 1y ago
You mean, you (the original poster) didnt disable it?u/XLioncc avatar XLioncc โข 1y ago
I have disabled it, but they don't
The reason why I post this is because I saw multiple server getting this in recent days.
https://www.google.com/search?q=inurl%3AO%2FO%2Fsrc%2Fbranch Created Jul 8, 2014 Public 599K 9.3K Community Bookmarks Wiki Discord / Matrix r/selfhosted Rules 1 Low-Effort / Off-Topicโจ 2 Spam / Self-Promotion / Affiliate Linksโจ 3 Respect / Hate-speech / Bullying / Harassmentโจ 4 Blog Link Postsโจ 5 Dashboards / Companion Apps / Tools - Wednesday Exceptionsโจ 6 New Projects - โNew Project Megathreadโ Exceptions โจ Read This First! ๐๐ผ Welcome to /r/SelfHosted!
Before you get started please read through this post! It contains a bunch of useful information so you can make the most of your time here.
We welcome posts that include suggestions for good self-hosted alternatives to popular online services, how they are better, or how they give back control of your data. Providing any hints and tips is greatly appreciated by our less technical readers!
For example:
Service: Dropbox - Alternative: Nextcloud
Service: Google Reader - Alternative: Tiny Tiny RSS
Service: Blogger - Alternative: WordPress๐งต Important Threads
Google Photos Mega Thread๐ Important Links
The Official Wiki
What is Self-Hosting?
The Official Discord Server
The Official Matrix Server๐ฅ๏ธ Related Subreddits
/r/HomeServer
/r/datahoarder
/r/musichoarder
/r/privacy
/r/Rad_Decentralization
/r/Syncthing
/r/Traefik
/r/WebApps๐ Useful Lists
Awesome-Selfhosted List of Self-Hosted Software
Awesome-Sysadmin List of SysAdmin tools and Software
Awesome Docker Apps List of Docker-Enabled apps, tools, and software๐ง Relevant Podcasts
The Selfhosted Podcast
Insight, information, and opinions
Relevant Interviews
Self-hosted tool debatesModerators Message Mods
u/kmisterk KmisterK, Liberated. u/astuffedtiger u/adamshand avatar u/adamshand nz.adam u/NikStalwart avatar u/NikStalwart u/alpay-on u/usrdef Opsec u/FnnKnn Orchomenos u/LeftBus3319 avatar u/LeftBus3319
u/Bjeaurn
u/AutoModerator avatar u/AutoModeratorView all moderators Installed Apps
Show Removal Reason IDsAsimov's Auditor Spotlight
Reddit Rules
Privacy Policy
User Agreement
Accessibility
Reddit, Inc. ยฉ 2026. All rights reserved.โช WWW.REDDIT.COM [email protected] [email protected] [email protected]