Author Topic: Failed Attempts (Read 12886 times)

frenulem - No.5417 · « **on:** January 03, 2011, 11:26:45 PM »

I woke up this morning and had an email saying i had two failed login attempts from this IP 173.193.221.28 lobo said he has the same problem, luckily these passwords are so complex anyway, changing my pass just incase

loboplayero · « **Reply #1 on:** January 03, 2011, 11:28:55 PM »

oh wow i had 3 fail log attempts today wasnt sure what was happening i hope we are safe or someone please can tell us how this happen? ip adress 96.226.130.13

Phantom · « **Reply #2 on:** January 03, 2011, 11:29:44 PM »

Hello phantomz0,
We have detected a failed login attempt on your account.

IP address of the failed login attempt: 208.66.135.190

frenulem - No.5417 · « **Reply #3 on:** January 03, 2011, 11:30:41 PM »

i dunno, i've been looking and nothing has changed so im hopful

TwisTtheTwiTcH · « **Reply #4 on:** January 03, 2011, 11:34:18 PM »

I just changed pages and I got logged out. This is the second time today it has happened. It's never happened before today... I haven't gotten an email from AcidMods. Although I don't recall ever getting an eMail from AM.. So who knows.

-TwisT

Added:.

Well I figured out why I haven't received an eMail. It's linked to my yahoo eMail which hasn't worked for years. >.<;'

So somebody could have tried my password, although nothing appears to be changed.

rafaliyo86 · « **Reply #5 on:** January 03, 2011, 11:50:23 PM »

i have the same problem 2 fails yestarday

GhoSt · « **Reply #6 on:** January 03, 2011, 11:58:56 PM »

Matt is already aware of this attack, I'm sure him and the other admins will work things out asap. I guess all you can do until then is ensure your password is as strong as possible.

TwisTtheTwiTcH · « **Reply #7 on:** January 04, 2011, 12:04:30 AM »

Quote from: GhoSt_Death on January 03, 2011, 11:58:56 PM

Matt is already aware of this attack, I'm sure him and the other admins will work things out asap. I guess all you can do until then is ensure your password is as strong as possible.

Yeah they know. It was talked about in the shout box earlier. The site does have security and we have capable admins running things. There is no need to worry ladies and gents.

-TwisT

rafaliyo86 · « **Reply #8 on:** January 04, 2011, 01:05:42 AM »

This ip adrress with my fail 192.251.226.206

whitetop · « **Reply #9 on:** January 04, 2011, 02:09:02 AM »

Hello whitetop,
We have detected a failed login attempt on your account.

IP address of the failed login attempt: 92.241.184.106

2 of these when i get up.

why me im nothing lol

whitetop · « **Reply #10 on:** January 04, 2011, 03:49:48 AM »

Hello whitetop,
We have detected a failed login attempt on your account.

IP address of the failed login attempt: 178.63.246.164

again at 11:49am

krazyone2006 · « **Reply #11 on:** January 04, 2011, 05:18:05 AM »

had 2 of these yesterday too whats up with that lol

Modded Matt · « **Reply #12 on:** January 04, 2011, 07:10:56 AM »

ok, you guys have seen whats going on, obviously. Unfortuantly, these ip addreses are proxy accounts with no real way to trace them. site security atm is very tight. so the only way to hack the site is through a admin or mods profile. this dosnt explane why they are attacking members, but there is not much I can do other than to protect your password. make sure its alpha numeric and case sinsitive

there is also a login security measure in place for all admin that restricts site access from un approved, pre determined ip addresses. you should be able to find this in your profile, I sugest any local or global mods set this up.

dedafmonteur · « **Reply #13 on:** January 04, 2011, 07:21:50 AM »

Same here, i got like 10 messages.

You can not hack

.

never!

krazyone2006 · « **Reply #14 on:** January 04, 2011, 08:45:27 AM »

just tryed it again

802Chives · « **Reply #15 on:** January 04, 2011, 10:13:33 AM »

so whoever it is just hit mine... sounds like a wannabe haxor. lol

crazy-modder · « **Reply #16 on:** January 04, 2011, 12:34:14 PM »

LOL not once but twice

Hello crazy-modder,
We have detected a failed login attempt on your account.

IP address of the failed login attempt: 199.48.147.35

Hello crazy-modder,
We have detected a failed login attempt on your account.

IP address of the failed login attempt: 199.48.147.35

aZiZ1 · « **Reply #17 on:** January 04, 2011, 12:41:23 PM »

Hello aZiZ1,
We have detected a failed login attempt on your account.

IP address of the failed login attempt: 193.198.207.8

Modded Matt · « **Reply #18 on:** January 04, 2011, 12:54:18 PM »

If I had to guess, I would say its a bot that is trying to guess passwords as the users log in/come to the site. every time a new member gets hit the bot trys logging in under the new name.....what would be the point if they logged in as crazy, what could they do? erase your sig...oh no...

Kilokk · « **Reply #19 on:** January 04, 2011, 12:58:10 PM »

well i havent gotten anything yet @.@ this makes very little sense... do we really make enough in add revenue to warrant anyone hacking us? what are the motives?

robin1989 · « **Reply #20 on:** January 04, 2011, 01:03:41 PM »

Quote from: Kilokk on January 04, 2011, 12:58:10 PM

what are the motives?

to be :censored:s i think

Kilokk · « **Reply #21 on:** January 04, 2011, 01:05:23 PM »

i agree with that.

TwisTtheTwiTcH · « **Reply #22 on:** January 04, 2011, 01:24:05 PM »

I changed my email address since my old one didn't work. Those times I was logged out, it seems somebody did try to log onto my account. Oh no, I hope they don't post anything without signing it "-TwisT"

XD

174.36.199.202
174.36.199.202

-TwisT

Kilokk was here (and is quite bored)

Mogler · « **Reply #23 on:** January 04, 2011, 03:53:41 PM »

None on mine, guess im not inportant enuff to get hacked.. hahah

loboplayero · « **Reply #24 on:** January 04, 2011, 04:08:17 PM »

here we go again its already my 6th time getting failed logging ip adress 199.48.147.35 what the hell !!

all ip adress are different?

Mogler · « **Reply #25 on:** January 04, 2011, 08:48:34 PM »

hahah i guess i am inportant now

! hahaha

Hello Mogler,
We have detected a failed login attempt on your account.

IP address of the failed login attempt: 174.36.199.203

TwisTtheTwiTcH · « **Reply #26 on:** January 04, 2011, 09:01:39 PM »

81.218.219.122 * 2

At 11:08

-TwisT

HiddenVenom · « **Reply #27 on:** January 04, 2011, 11:57:59 PM »

I got two of these this morning.

Traced a couple of the addresses on this page and they seemed to lead to private computers. Not entirely sure though.

But I am sure that the cracker/s (they do not deserve to be called hackers) are using common passwords to try to access accounts.

If you password is only a word or name, change it now.

Make sure:
- There is at least one symbol or special character
- There is at least one Upper Case Letter
- There is at least three numbers that do not relate to your personal information e.g. Date of Birth
- Update your security question so the answer does not make sense.

whitetop · « **Reply #28 on:** January 05, 2011, 07:38:05 AM »

just had 4 more dame this champs trying it all lol

robin1989 · « **Reply #29 on:** January 05, 2011, 08:06:44 AM »

lol still not touched mine

frenulem - No.5417 · « **Reply #30 on:** January 05, 2011, 08:29:57 AM »

Quote from: Mactastic Mendez on January 05, 2011, 08:06:44 AM

lol still not touched mine

it's because they are 1337 hax0rz

got these from the forth to today
86.184.232.109
204.8.156.142 * 2
173.193.221.28
192.251.226.206 * 4

Kilokk · « **Reply #31 on:** January 05, 2011, 09:19:20 AM »

I got hit with a few. no real point in posting the IP address since its always different though is there?

frenulem - No.5417 · « **Reply #32 on:** January 05, 2011, 09:20:44 AM »

Yeah, force of habit now tho lol

robin1989 · « **Reply #33 on:** January 05, 2011, 09:25:34 AM »

ok so im beefing up security a bit on the server. but now that i have done that i was wondering if people could list every IP used on there accounts and if someone could make a list of IP's that are used and a *1 or *3 etc for how many times it was used.

thanks

lets fly server monkeys and cary on guarding

Kilokk · « **Reply #34 on:** January 05, 2011, 09:47:12 AM »

well i dont have the internet in my home at the moment so i dont have a set IP address.

i got hit by 203.174.87.18 twice tho

robin1989 · « **Reply #35 on:** January 05, 2011, 09:59:34 AM »

203.174.87.18
174.36.199.202 *2
92.241.184.106
96.226.130.13
208.66.135.190
86.184.232.109
199.48.147.35 *3
178.63.246.164
204.8.156.142 *2
193.198.207.8
173.193.221.28 *4
192.251.226.206 *11
81.218.219.122 *2
174.36.199.203
83.170.92.9 *4
192.251.226.205 *2
86.20.212.49
83.87.66.24 *2
88.142.228.14
83.142.228.14
65.183.151.13
66.96.16.32 *2
174.36.199.200 *4
45.231.120.93
132.142.28.101
81.144.232.108 *2
199.48.147.45
174.36.199.201 *4
95.143.193.145 *2
199.48.147.39 *2
77.54.97.144 *2

list updated 050111 up to matts lock

whitetop · « **Reply #36 on:** January 05, 2011, 10:07:09 AM »

83.170.92.9 x4

that's yesterday and to day so its starting to be the same one for me

robin1989 · « **Reply #37 on:** January 05, 2011, 10:09:22 AM »

ok i will update the list again tommorow after more people get chance to post there results

hyper999 · « **Reply #38 on:** January 05, 2011, 10:38:12 AM »

192.251.226.205 *2
86.20.212.49
83.87.66.24 *2

l0rdnic0 · « **Reply #39 on:** January 05, 2011, 12:29:18 PM »

Here are the attacking IP's
88.142.228.14
83.142.228.14

organisation: ORG-RL20-RIPE
org-name: RapidSwitch Ltd
org-type: LIR
address: iomart Hosting Ltd t/a RapidSwitch
Spectrum House,
Clivemont Road
SL6 7FW Maidenhead
United Kingdom
phone: +442071060730
fax-no: +442071060739
e-mail: abuse@rapidswitch.com
admin-c: AR6363-RIPE
mnt-ref: RAPIDSWITCH-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered

nEoVaLoR · « **Reply #40 on:** January 05, 2011, 01:45:43 PM »

65.183.151.13

Just got an email today, here is the info, two login attempts were made:
NetRange: 65.183.128.0[Who Is IP][trace][Reverse IP Search] - 65.183.159.255[Who Is IP][trace][Reverse IP Search]
CIDR: 65.183.128.0[Who Is IP][trace][Reverse IP Search]/19
OriginAS:
NetName: BTNETWORK2
NetHandle: NET-65-183-128-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
NameServer: NS.BURLINGTONTELECOM.COM[Who Is Domain]
NameServer: NS3.BURLINGTONTELECOM.COM[Who Is Domain]
RegDate: 2006-05-16
Updated: 2007-06-07
Ref: http://whois.arin.net[Who Is Domain]/rest/net/NET-65-183-128-0-1
Address: 200 Church St
Address: Suite 101
City: Burlington
StateProv: VT
PostalCode: 05401

Also from IP Adress Inspector:
"The Project Honey Pot system has detected behavior from the IP address consistent with that of a comment spammer. Below we've reported some other data associated with this IP"
Spider First Seen: approximately 1 year, 1 month, 3 weeks ago
Spider Last Seen: within 1 month, 1 week

whitetop · « **Reply #41 on:** January 05, 2011, 01:58:10 PM »

199.48.147.35 x2

IP address [?]:     199.48.147.35 [Whois] [Reverse IP]
IP country code:    US
IP address country:    ip address flag United States
IP address state:    California
IP address city:    San Francisco
IP postcode:    94159
IP address latitude:    37.7645
IP address longitude:    -122.4294
ISP of this IP [?]:    Applied Operations
Organization:    Applied Operations
Host of this IP: [?]:    tor-exit-router35-readme.appliedops.net [Whois] [Trace]
Local time in United States:    2011-01-05 13:57

http://www.stopforumspam.com/ipcheck/199.48.147.35

FOOKz™ · « **Reply #42 on:** January 05, 2011, 03:14:32 PM »

Jan. 5, 2010:
66.96.16.32 *2
174.36.199.200 *4
192.251.226.206 *2
45.231.120.93
192.251.226.206 *4

Jan. 4, 2010:
132.142.28.101
81.144.232.108 *2

lmao this kid needs to stop

Post Merge: January 05, 2011, 06:44:54 PM

i've got a few speculations on what kind of attack this is and I won't way because normally they're probably reading this right now.

nEoVaLoR · « **Reply #43 on:** January 05, 2011, 09:17:07 PM »

Quote from: whitetop on January 05, 2011, 01:58:10 PM

199.48.147.35 x2

IP address [?]:     199.48.147.35 [Whois] [Reverse IP]
IP country code:    US
IP address country:    ip address flag United States
IP address state:    California
IP address city:    San Francisco
IP postcode:    94159
IP address latitude:    37.7645
IP address longitude:    -122.4294
ISP of this IP [?]:    Applied Operations
Organization:    Applied Operations
Host of this IP: [?]:    tor-exit-router35-readme.appliedops.net [Whois] [Trace]
Local time in United States:    2011-01-05 13:57

http://www.stopforumspam.com/ipcheck/199.48.147.35

199.48.147.45
Same guy just hit me! Again! this is crazy..

whitetop · « **Reply #44 on:** January 05, 2011, 09:20:40 PM »

well tor is kinda easy to get real ip but only if you know how encryption works but still if he uses it no way to stop this stuff.

nickxab · « **Reply #45 on:** January 06, 2011, 02:41:12 AM »

The same here.This happened 2 times.
Today i got this email:

Quote

Hello nickxab,
We have detected a failed login attempt on your account.

IP address of the failed login attempt: 192.251.226.206

Axl · « **Reply #46 on:** January 06, 2011, 07:45:43 AM »

i had 2 a few minutes ago from 174.36.199.201
4 yesterday, two from 95.143.193.145 and two from 199.48.147.39
i don't understand what is going on

....i just home my account is safe

TwisTtheTwiTcH · « **Reply #47 on:** January 06, 2011, 08:12:52 AM »

Quote from: Axl on January 06, 2011, 07:45:43 AM

i had 2 a few minutes ago from 174.36.199.201
4 yesterday, two from 95.143.193.145 and two from 199.48.147.39
i don't understand what is going on ....i just home my account is safe

This is being worked on. And AM has pretty wicked security from what I've heard. So no need to worry. If you want to make double sure then make a case sensitive password with numbers and special characters like "!"

-TwisT

whitetop · « **Reply #48 on:** January 06, 2011, 08:56:55 AM »

77.54.97.144 x2

FOOKz™ · « **Reply #49 on:** January 06, 2011, 08:04:12 PM »

YAY MORE

173.193.221.28 *2
174.36.199.201 *2

loboplayero · « **Reply #50 on:** January 06, 2011, 10:49:17 PM »

again n again.....

i lost count already

toadzilla · « **Reply #51 on:** January 07, 2011, 01:30:28 AM »

i noticed the past few days i would log in then few mins later click a page and it say i need to log in again hey guys could it be part of that hack that was in the shop a few weeks ago

rafaliyo86 · « **Reply #52 on:** January 07, 2011, 02:08:01 AM »

i have two all day lol and i have to do login again. i want this stop lol

whitetop · « **Reply #53 on:** January 07, 2011, 02:09:19 AM »

Quote from: toadzilla on January 07, 2011, 01:30:28 AM

i noticed the past few days i would log in then few mins later click a page and it say i need to log in again hey guys could it be part of that hack that was in the shop a few weeks ago

i would not think it is since they hacked the shop but cannot hack the forum we think its just a kid since there just going for member and not mod/admin much.

crazy-modder · « **Reply #54 on:** January 07, 2011, 05:01:49 AM »

Lol dude...i just had 2 more this morning which puts my failed logins up to 12 now. We should really find out who this loser is thats doing this and blow up his computer with trojans.

Kilokk · « **Reply #55 on:** January 07, 2011, 05:52:47 AM »

meh... we should just put a banner or something saying "JUST MAKE AN ACCOUNT!" cause its obvious (at who is getting hit) that A. they are retarded B. they dont know what they are doing or C. they are 12

frenulem - No.5417 · « **Reply #56 on:** January 07, 2011, 06:04:56 AM »

im thinking a fail at a DDoS attack, got about 7 more, will post ip's asap

Modded Matt · « **Reply #57 on:** January 07, 2011, 06:23:05 AM »

ok, two pages of post is probably enough.

official,
there is someone or something trying to gain access to the site through peoples account. unfortunatly, there is nothing we can do about this. we cant stop it, control it, or slow it down. The more and more popular the site becomes the more of this we will have to deal with. All we are doing by maintaning a thread like this is giving the so called hacker the attention he wants.

the good news is the site is secure!!!

I am tyred of seeing this as the most recent post, and i am sure new members or potential members are being scared away after seeing this topic.

thread

.

News:

Author Topic: Failed Attempts (Read 12886 times)