Respect admin.

General discussion about the Rendlesham forest incident

Postby Cybertoad » Wed Jun 28, 2006 2:55 pm

Admin, don't touch the above spam post ....

I work for your hosting provider and am investigating the above spam
post right now and will put in router blocks and other measures into
your account to try to help prevent a repeat of this kind of spamming.
Cybertoad
 

Postby Cybertoad » Wed Jun 28, 2006 3:26 pm

Ok, I've got the information I need so you can delete this
thread or do whatever you would like to do with it ....

Here's what has been done
====================

1. The IP of this spammer traces to a server at Layered Tech.
I put a physical block on that server in our routers and also
added the appropriate IP range to your ban list and .htaccess
files on these forums and in your account.

2. I added a single new word censor to your forums that filters
out the spammer's topic word in question.


I hope this helps things until you can login and handle this issue.

You might want to check with http://www.phpbbhacks.com to see about
getting a mod to block guests from posting URLs or possibly just
disable guest posting completely.
Cybertoad
 

Postby Cybertoad » Wed Jun 28, 2006 3:53 pm

Oh don't worry about the extra administrator account ...

I created a new account named "Cybertoad" and promoted it to
administrator using server root functions so that I could go in
and take a look at the IP address of the spammer.

We've been getting reports from a lot of our hosting members
about someone coming on to their forums either as a guest or
a new member posting spam advertisements for drugs and
we are currently reviewing all sites for that kind of activity and
trying to get those spammers blocked from the network.

(Incidentally, a lot of our contacts at other providers are reporting
the same and apparently posting spam on forum communities
is spammers latest obsession .... fun ey?)

From what we can tell, these spammers have robot scripts setup
on dedicated servers at other providers that scan the net looking
for forums that allow guest posting or don't require image verification
and then post their spam advertisements.

Anyway ...

It's just a temporary admin account and will be removed once
we are certain we got this bozo stopped.

Looking around here, your security doesn't look too bad but I see
a few places where you could make a few adjustments to help
improve things a bit. Send me a private message while this account
is still here or submit a support message to support@cybertoad.net
if you would like assistance implementing some of those ideas to
increase security and reduce the possibility of spammer visits.
Cybertoad
 

Postby Andy » Sun Apr 01, 2007 8:16 pm

Reminds me of the old Monty Python sketch. :D
Andy
 
Posts: 280
Joined: Sun Sep 03, 2006 8:14 am
Location: Ipswich


Return to The Rendlesham forest incident

Who is online

Users browsing this forum: No registered users and 3 guests