Topic Sponsor
General F150 Discussion General Ford F150 truck discussions and questions
Sponsored by:
Sponsored by: Real Truck

Did this place get hacked?

Thread Tools
 
Search this Thread
 
Old Mar 10, 2016 | 10:38 AM
  #1  
69Shark's Avatar
Thread Starter
I'd rather be sailing.
10 Year Member
Liked
Loved
 
Joined: Jul 2013
Posts: 392
Likes: 100
From: Everett Wa
Default Did this place get hacked?

I am seeing a ton of junk in what looks like Chinese!
Some threads are clean but most are not!

Scott
Reply
Old Mar 10, 2016 | 10:39 AM
  #2  
Martian's Avatar
A dude playing a dude
Supporting Member

Veteran: Navy
Liked
Loved
Top Answer: 5
 
Joined: Mar 2013
Posts: 16,813
Likes: 2,065
From: Germany
Default

The posts aren't using the Latin alphabet but it looks like that's just in an effort to confuse any efforts by the site's built-in spam filter. The characters are broken up by letters that form a web site. Judging by the speed of the posts (slow), it's probably a human (or a team of them) creating false accounts.
Reply
Old Mar 10, 2016 | 01:42 PM
  #3  
03f15012's Avatar
Super Moderator
Supporting Member

10 Year Member
Liked
Loved
Community Favorite
 
Joined: Jan 2013
Posts: 13,490
Likes: 553
From: North Charleston, SC
Default

Spammers. And a lot of them. We're trying to get rid of them as fast as we can, but a lot of us are busy. I'm doing what I can, but I'm about to hit the road for 2 hours. Sorry guys, we'll get this taken care of as soon and fast as we can.
Reply
Old Mar 10, 2016 | 01:43 PM
  #4  
Martian's Avatar
A dude playing a dude
Supporting Member

Veteran: Navy
Liked
Loved
Top Answer: 5
 
Joined: Mar 2013
Posts: 16,813
Likes: 2,065
From: Germany
Default

I keep asking... make me a mod, someone.
Reply
Old Mar 10, 2016 | 05:18 PM
  #5  
SteveLord's Avatar
Senior Member
Veteran: Army
10 Year Member
Liked
Community Favorite
 
Joined: Feb 2013
Posts: 5,206
Likes: 893
From: Iowa
Default

Started late lastnight/this morning depending where you are. Remember, the mods are volunteers.
Reply
Old Mar 11, 2016 | 03:56 AM
  #6  
Mod (Ret.)'s Avatar
Moderator (Ret.)
Supporting Member

 
Joined: Sep 2008
Posts: 9,460
Likes: 486
From: Lake Mary Florida
Default

Once identified (IP) as a spammer, the account is banned, and is entered into a spam database. If the spammer opens several accounts under several IP's, each account has to be banned. We catch them as fast as we can.
Reply
Old Mar 11, 2016 | 08:25 AM
  #7  
Martian's Avatar
A dude playing a dude
Supporting Member

Veteran: Navy
Liked
Loved
Top Answer: 5
 
Joined: Mar 2013
Posts: 16,813
Likes: 2,065
From: Germany
Default

Originally Posted by Bucko
Once identified (IP) as a spammer, the account is banned, and is entered into a spam database. If the spammer opens several accounts under several IP's, each account has to be banned. We catch them as fast as we can.

Are the IPs so vast that you can't ban a range of them?
Reply
Old Mar 11, 2016 | 08:31 AM
  #8  
03f15012's Avatar
Super Moderator
Supporting Member

10 Year Member
Liked
Loved
Community Favorite
 
Joined: Jan 2013
Posts: 13,490
Likes: 553
From: North Charleston, SC
Default

Originally Posted by LaMartian

Are the IPs so vast that you can't ban a range of them?
Well, IP's are four sets of numbers. The first three are pretty hard to change, yet the last set is easily changed. And the last one can be up to three digits; that's nearly 1,000 IP's alone that one person could easily get. So i would come to believe, anyway. Not too familiar if the last set has a number cap.

We had a troublesome member that changed his IP several times; out of the 10 PB's he has... about 7 different IP's were used. 4-5 were just the same with the last digits swapped.

Last edited by 03f15012; Mar 11, 2016 at 08:37 AM.
Reply
Old Mar 11, 2016 | 08:36 AM
  #9  
Martian's Avatar
A dude playing a dude
Supporting Member

Veteran: Navy
Liked
Loved
Top Answer: 5
 
Joined: Mar 2013
Posts: 16,813
Likes: 2,065
From: Germany
Default

IP4 addresses are, yeah. I disagree, though. It's VERY easy to change all four octets, and any of the four octets can be up to three digits since they're eight bit (0 to 255), and any attacker knows that. Do you have access to the firewall itself? Here's an ACL for you that will block both Koreas.
Attached Files
File Type: txt
acl.txt (30.9 KB, 126 views)
Reply
Old Mar 11, 2016 | 08:40 AM
  #10  
03f15012's Avatar
Super Moderator
Supporting Member

10 Year Member
Liked
Loved
Community Favorite
 
Joined: Jan 2013
Posts: 13,490
Likes: 553
From: North Charleston, SC
Default

Originally Posted by LaMartian
IP4 addresses are, yeah. I disagree, though. It's VERY easy to change all four octets, and any of the four octets can be up to three digits since they're eight bit (0 to 255), and any attacker knows that. Do you have access to the firewall itself? Here's an ACL for you:
I'm not certain if Admins or the IB guys could. All I really can do at this level is run the IP4 address. I never looked into it excessively about IP's and how in-depth they get, so please excuse my ignorance on the subject.
Reply



All times are GMT -4. The time now is 03:13 PM.