To the GoonHub.com administrator: Your server is hacked

[unnamed]

Whoever runs the goonhub.com website: Your server (IP address 198.27.70.16) appears to be hacked and is used to submit spam to other web forums. You can verify by putting the IP address into a search query at http://www.stopforumspam.com/search
Please clean up your server.

[kyle2143]

I'd listen to him Wire. This sounds serious.

[NateTheSquid]

oh no we must trust the unnamed man who says goonhub.com is a forum

also why is this phrased like he's asking a neighbour to mow his lawn cause the neighbourhood looks bad

[unnamed]

the unnamed man who says goonhub.com is a forum

I am not, re-read my post. I am saying that spam is being delivered to my and other people's forums through the same physical server that runs the website goonhub.com. As there is no contact information available on goonhub.com, I chose this forum to reach out as it seemed like the most probable way of reaching the administrator of said website. I am merely trying to help. Trying to shoot the messenger is not going to help anyone, Nate. It just means that this host will continue to send spam messages to other forums and in return get a bad reputation on various anti-spam databases.

I am not asking you to mow my lawn. I am asking the administrator of goonhub.com to close security holes in their web server which cause spam to be posted to other web servers.

[NateTheSquid]

The phrase "other web forums" is indicative of goonhub.com being a forum itself. Otherwise you'd just say "web forums". Also a post like yours with no evidence and a shifty url is not going to be investigated by anyone with half a braincell

edit: alright well I googled the site, and it seemed legit so I checked it out, as far as I can tell there's been spam from that IP address, yes, but there's nothing on said site to suggest it's from goonhub

edit mk 2.0 electric boogaloo: well maybe this guy has a point that somethings up but still definitely could have had a better approach. time to dissapear from this thread

[unnamed]

The phrase "other web forums" is indicative of goonhub.com being a forum itself.

That's what you interpret into it. But hey, discrediting a hack report because English is not someone's first language and they wrote an ambiguous sentence is totally the correct way to proceed, right?
It doesn't seem to be up to you to investigate this incident, so maybe stay out of this thread and stop questioning me, please?

Anyway, StopForumSpam is quite a reputable source for anti-spam measures and certainly not "shifty". But if that's not proof enough, here is first-hand evidence of the spammer that tried to sign up on my forum, using the goonhub.com server as proxy:



Edit: The "Hostname" field on that screenshot is the reverse DNS entry of that IP, just to make it absolutely clear.

[Wisecrack34]

Oh no, this looks spooky

[Vitatroll]

Itis me. Iam the hackers. I didnot expect catching me!! No!

I hacked the IPs for provide food itis family. Donot report please!! Iam good persons and Iam arenot HIGHLY FUCKING ILLEGAL!!

[Sov]

Well there’s certainly no harm in wire verifying he is running the most up to date security patches and looking for suspicious activity

Exploits pop up all the time after all, and boxes do get compromised

[unnamed]

In the meantime a fourth report has been added to the StopForumSpam database for that server IP, so it is continued to be used to post spam. I suggest to run netstat (assuming it's a Unix-based server) to check if there are any suspicious ports open. It could be either that you are running an open proxy without knowing, or even worse, someone could have compromised the server and is running their own software on it. In that case the only sensible thing is to reinstall the complete server because you never know how deeply the attacker nested their stuff into the system.

[Ines]

The server administrator has been notified.

[Wire]

Hi I'm the server admin. Thank you for the report and apologies for some of the ruder users here. This looks concerning and I'm investigating the issue now. I should mention that we're currently in the process of migrating to another server, so even if I really suck at resolving this now, it will be fixed one way or another soon.

[Wisecrack34]

Sweet, thank you Unknown man for your help

(Someone give him a nice avatar as a gift of friending ships)

[popecrunch]

i made them an avatar for reporting an issue, thank you for loving pupkin

[unnamed]

Wire: Thank you for the reply and good luck with fixing the issue. If you have any interesting findings to report I'd love to hear about them (through PM if you prefer that way) as I'm quite wondering where the sudden increase in spam in the last few weeks is coming from.

And thank you for the avatar