This concerns my Serverhacker (SHN Forums) and I wasn't sure of the appropriate place to to post.
At one point today my site wouldn't load properly and I couldn't login. It basically looked like an HTML page with a missing style sheet.
I had to recycle the application pool and then the site was fine.
But I then found a spammer somehow managed to post several new topics and a reply under an existing username without leaving any other traces of having been there. The username hasn't been used in years (last visit 2007) and doesn't show as a recent visitor. The user IP address also doesn't appear to have changed from the last visit in 07.
I rarely get spam and it's usually a manually registered account. So, even though this is just a minor irritant, I'm intrigued as to how it was done.
My forensic skills are limited so any suggestions on where to look would be appreciated.
Stealthy spammer
Posted - 19 May 2012 : 17:42:42
