Late Friday night my website at adamrulz.com was "hacked". The perpetrators gained unauthorized access and deleted every file in there. I e-mailed support at the company which hosts my webpage. They gave me information about access to my webserver around 11pm Friday (PST).
Here's what I got:
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:30 - 23:30 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:27 - 23:27 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:26 - 23:27 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:22 - 23:25 (00:02)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 23:10 - 23:10 (00:00)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 23:09 - 23:09 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:06 - 23:06 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:05 - 23:05 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:03 - 23:05 (00:01)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:02 - 23:03 (00:00)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 22:48 - 22:52 (00:04)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 22:47 - 22:47 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 22:47 - 22:47 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 22:46 - 22:46 (00:00)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 22:43 - 22:47 (00:03)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 22:29 - 22:30 (00:00)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 22:28 - 22:28 (00:00)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 22:24 - 22:25 (00:00)
adamrulz ftp tayhou-207-218-2
All of a sudden I suspect Zarak involvement. They've had an unfounded paranoia about me and "Clean Laundry" ever since it was put together.
Late Friday, a few hours before this hole thing started I had posted in this thread (I'm Jeff Saunders) stating my concerns over the security in the failsafe board. I rush off to the board to change my password and find my account had been deleted. Later someone mentions in another thread that administrators at the failsafe board could have access to the user's passwords. Vindicator denies it and Optimus Pyre proves that he did it many times with his administrative power.
Later on Saturday I make a post using my "Jeff Saunders" ID. The picture of Optimus Prime in my sig had been replaced by goatse man. At the time the only person I thought could have done this was Dez as he also had access to my "Jeff Saunders" account but there was no reason for him to do something so stupid.
I dared not speak out about the attack publicly without any evidence. I asked some friends about the IP addresses.
One good friend of mine informed me that one of the IPs traced back to Arizona, in the Phoenix area, and mentioned that our good friend Tarantulas/Tarantulas Prime/Tarantulas Zarak hails from there. The same Tarantulas Prime with administrative access to the failsafe board. Still. Too early to cast blame since I want to be 100% certain.
I start to keep an eye out for his posts. I see this. His words are kind. I want to believe him since I can't imagine someone being so blatantly hypocritical. But one line catches my eye:
"It might be of interest to see if anyone else was known to have access to the Jeff Saunders ezboard account. If someone else had the password to it, and I have heard that someone else did, then we should be looking there, and not participating in a witch hunt where the witch is a preconceived victim and we try to gather evidence to support our preconceived notions."
Yes I did share the password to the Jeff Saunders ID with Dez. This was done in my "Clean Laundry" forum which on myself (or someone with my catch all password) would have.
I talk to Dez. He says he didn't put goatse in my sig. I beleive him.
Before I go on explaining the next day's event I'd like to share a thread with all of you. Flame War Central's private forum has had threads copied in the past and it is now my pleasure to bring you this one: une question d'honneur (contains course language).
Then comes Sunday night. Charon checks the IP 130.13.85.1 against the database of IPs he gathered while at the AllSpark.
tarantulasprime 130.13.85.188
tarantulasprime 130.13.85.187
tarantulaszarak 130.13.85.187
Now I'm pissed. I point out the other IP range (tayhou-207-218-2) which is narrowed down to 4 users, 2 of which are DevilZ and Black Zarak (feel free to draw your own conclusions about the matching IPs).
That's it for the facts. Now I'm going to rant.
Now I don't know who did what while in there. The simple fact is that Tarantulas and Black Zarak gained unauthorized access to my web account around the time everything was deleted. Whether it was one of them who did the deleting or one of their Zarak friends is unknown to me. Hopefully the guilty party(ies) will come clean (laundry) and show their friend's innocence.
Now I'm really pissed that I was chosen as a target for this attack. It is obvious to me that certain Zaraks suspected that my "Clean Laundry" board was behind this week's coup on the AllSpark. Any idiot who visited that forum could easily see that this was simply untrue. This crime was still commited against me. For what? What have I ever done to Taratulas or Black Zarak? I speak my mind. Sure I put them down, make fun of them and all that. I never liked them. I was starting to think I was just paranoid but now I see them for what they really are. So I go around with Saunderz and post some weird posts at AUG. Big deal. There's a line that was crossed here.
A very pissed off,
Chopper Face 69/aDam Rulz!/Adam Gardner
PS (the innocence report): Dark Zarak's cool 'cause he's Canadian. I hope he had nothing to do with this. Not all Zaraks had something to do with this. Also I'm innocent of my goatse thing as I mentioned up there. I hope my ban can be lifted. Also by my math Vindicator was quite asleep at the time of this transgression (2am EST) and probably not involved.
Here's what I got:
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:30 - 23:30 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:27 - 23:27 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:26 - 23:27 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:22 - 23:25 (00:02)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 23:10 - 23:10 (00:00)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 23:09 - 23:09 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:06 - 23:06 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:05 - 23:05 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:03 - 23:05 (00:01)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 23:02 - 23:03 (00:00)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 22:48 - 22:52 (00:04)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 22:47 - 22:47 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 22:47 - 22:47 (00:00)
adamrulz ftp vdsl-130-13-85-1 Fri Oct 5 22:46 - 22:46 (00:00)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 22:43 - 22:47 (00:03)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 22:29 - 22:30 (00:00)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 22:28 - 22:28 (00:00)
adamrulz ftp tayhou-207-218-2 Fri Oct 5 22:24 - 22:25 (00:00)
adamrulz ftp tayhou-207-218-2
All of a sudden I suspect Zarak involvement. They've had an unfounded paranoia about me and "Clean Laundry" ever since it was put together.
Late Friday, a few hours before this hole thing started I had posted in this thread (I'm Jeff Saunders) stating my concerns over the security in the failsafe board. I rush off to the board to change my password and find my account had been deleted. Later someone mentions in another thread that administrators at the failsafe board could have access to the user's passwords. Vindicator denies it and Optimus Pyre proves that he did it many times with his administrative power.
Later on Saturday I make a post using my "Jeff Saunders" ID. The picture of Optimus Prime in my sig had been replaced by goatse man. At the time the only person I thought could have done this was Dez as he also had access to my "Jeff Saunders" account but there was no reason for him to do something so stupid.
I dared not speak out about the attack publicly without any evidence. I asked some friends about the IP addresses.
One good friend of mine informed me that one of the IPs traced back to Arizona, in the Phoenix area, and mentioned that our good friend Tarantulas/Tarantulas Prime/Tarantulas Zarak hails from there. The same Tarantulas Prime with administrative access to the failsafe board. Still. Too early to cast blame since I want to be 100% certain.
I start to keep an eye out for his posts. I see this. His words are kind. I want to believe him since I can't imagine someone being so blatantly hypocritical. But one line catches my eye:
"It might be of interest to see if anyone else was known to have access to the Jeff Saunders ezboard account. If someone else had the password to it, and I have heard that someone else did, then we should be looking there, and not participating in a witch hunt where the witch is a preconceived victim and we try to gather evidence to support our preconceived notions."
Yes I did share the password to the Jeff Saunders ID with Dez. This was done in my "Clean Laundry" forum which on myself (or someone with my catch all password) would have.
I talk to Dez. He says he didn't put goatse in my sig. I beleive him.
Before I go on explaining the next day's event I'd like to share a thread with all of you. Flame War Central's private forum has had threads copied in the past and it is now my pleasure to bring you this one: une question d'honneur (contains course language).
Then comes Sunday night. Charon checks the IP 130.13.85.1 against the database of IPs he gathered while at the AllSpark.
tarantulasprime 130.13.85.188
tarantulasprime 130.13.85.187
tarantulaszarak 130.13.85.187
Now I'm pissed. I point out the other IP range (tayhou-207-218-2) which is narrowed down to 4 users, 2 of which are DevilZ and Black Zarak (feel free to draw your own conclusions about the matching IPs).
That's it for the facts. Now I'm going to rant.
Now I don't know who did what while in there. The simple fact is that Tarantulas and Black Zarak gained unauthorized access to my web account around the time everything was deleted. Whether it was one of them who did the deleting or one of their Zarak friends is unknown to me. Hopefully the guilty party(ies) will come clean (laundry) and show their friend's innocence.
Now I'm really pissed that I was chosen as a target for this attack. It is obvious to me that certain Zaraks suspected that my "Clean Laundry" board was behind this week's coup on the AllSpark. Any idiot who visited that forum could easily see that this was simply untrue. This crime was still commited against me. For what? What have I ever done to Taratulas or Black Zarak? I speak my mind. Sure I put them down, make fun of them and all that. I never liked them. I was starting to think I was just paranoid but now I see them for what they really are. So I go around with Saunderz and post some weird posts at AUG. Big deal. There's a line that was crossed here.
A very pissed off,
Chopper Face 69/aDam Rulz!/Adam Gardner
PS (the innocence report): Dark Zarak's cool 'cause he's Canadian. I hope he had nothing to do with this. Not all Zaraks had something to do with this. Also I'm innocent of my goatse thing as I mentioned up there. I hope my ban can be lifted. Also by my math Vindicator was quite asleep at the time of this transgression (2am EST) and probably not involved.
