The New And Improved Unofficial R65 Forum V2

General Category => Totally Off-Topic Discussions, Rants, Tire & Oil Threads, Etc. => Topic started by: Justin B. on November 19, 2016, 08:26:24 PM

Title: Yarrrrrr, there be hackers and spammers about...
Post by: Justin B. on November 19, 2016, 08:26:24 PM
Looking through the error log there is a subnet with multiple IPs trying to access various parts and functions that are not allowed to guests.  I did a whois and it appears the entire block is "owned" by the Chinese:

Beijing Baidu Netcom Science and Technology Co., Ltd.

They have been added to the permanent ban list.  If anybody starts getting a ban message let me know...
Title: Re: Yarrrrrr, there be hackers and spammers about...
Post by: Bob_Roller on November 19, 2016, 08:31:17 PM
I have not seen any Chinese IP addresses in a while, last week, there were about 8 ' guests ' that had IP addresses that were very close numerically, it was from the LA area .
Title: Re: Yarrrrrr, there be hackers and spammers about...
Post by: wilcom on November 19, 2016, 09:07:16 PM
Quote
They have been added to the permanent ban list.

You go someplace else,  "No tickie, No laundry!"
Title: Re: Yarrrrrr, there be hackers and spammers about...
Post by: Justin B. on November 20, 2016, 12:30:57 PM
God one, Joe.

Bob, this entity has the entire 180.76.0.0 - 180.76.255.255 block...
Title: Re: Yarrrrrr, there be hackers and spammers about...
Post by: Bob_Roller on November 20, 2016, 01:03:40 PM
If you ban the IP address, can they even lurk in ' guest ' mode ??
Title: Re: Yarrrrrr, there be hackers and spammers about...
Post by: Justin B. on November 20, 2016, 09:54:02 PM
Bob, I'm not really sure - I'll have to watch the error log for a while.  I think they will get some sort of banned message if they try to access anything but I'm not 100% sure.
Title: Re: Yarrrrrr, there be hackers and spammers about...
Post by: Justin B. on November 21, 2016, 10:31:06 PM
The message in the error log is "You are not allowed to access this section" so I guess they can see the main page but if they try to access anything it won't let them...