Forum Discussion

tiwang's avatar
tiwang
Icon for Nimbostratus rankNimbostratus
Sep 18, 2014

receiving devcentral like spam mails

hi out there During the last weeks have I received spam-mails from a source which seems to be devcentral at f5.com with my user-account as displayname. The mails are pretty close to our normal devcentral subscriber mails with the blue devcentral border in top and the "read the full question" button etc - but they offer not usefully help there for f5 related stuff but offers a bit different type!

 

Do we all in this forum suffer under this problem (probably devcentral been hacked and leaked) or is it only me (probably my useraccount hacked and leaked) I could of course just define this mail as spam but then would I also miss the rest of these very usefully discussions - and if my useraccount has been leaked I need to do something about it.

 

best regards /ti

 

8 Replies

  • BinaryCanary_19's avatar
    BinaryCanary_19
    Historic F5 Account

    You can look in the email headers and see the origin IP address. Very likely they are just spoofed emails, and your address is simply inside a spammer's database, or someone is trying to phish your account.

     

    I haven't received spam email from devcentral.

     

  • tiwang's avatar
    tiwang
    Icon for Nimbostratus rankNimbostratus

    hi Again They are spoofed emails - no doubt about that - but if it is only my account which is used then must I do something about it - if we all got spammed the problem might be different. Thanks for the reply

     

  • Hi ti, you are not alone. We have been working feverishly to stop this persistent attack, which has been ongoing for several days. Sorry for the inconvenience.
  • tiwang's avatar
    tiwang
    Icon for Nimbostratus rankNimbostratus
    let me know if you need some header samples best regards /ti
  • i receieved that too last week. the header shows X-Originating-IP: [208.85.209.139] , which is f5. that stopped now. anybody know what happend? to me it looks like some f5 server was not patched properly.

     

  • now i understand...somebody was posting the spam messages and that caused to send mails to members. explanation below given already.

     

    https://devcentral.f5.com/articles/blocking-spam-with-custom-attack-signatures

     

    • Our site is designed to allow (and encourage) open communication among all our members. While we want everyone to share and collaborate, we obviously discourage malicious or just outright annoying posts on our site. So when we got hit with these spam messages, we quickly deleted them. In fact many of you helped identify and report these as spam messages...so thanks! This is a perfect example of that "caring for our community" stuff I was talking about earlier...good times. While we were able to delete these posts, we wanted a more proactive approach that stopped them before they ever hit our site.
  • tiwang's avatar
    tiwang
    Icon for Nimbostratus rankNimbostratus
    sorry jason - but devcentral is under attack again.. best regards /ti