Acidmods
Acid Mods Community Area
=> Discussion Boards => General Discussion => Topic started by: frenulem - No.5417 on January 03, 2011, 11:26:45 PM
-
I woke up this morning and had an email saying i had two failed login attempts from this IP 173.193.221.28 lobo said he has the same problem, luckily these passwords are so complex anyway, changing my pass just incase
-
oh wow i had 3 fail log attempts today wasnt sure what was happening i hope we are safe or someone please can tell us how this happen? ip adress 96.226.130.13
-
Hello phantomz0,
We have detected a failed login attempt on your account.
IP address of the failed login attempt: 208.66.135.190
-
i dunno, i've been looking and nothing has changed so im hopful
-
I just changed pages and I got logged out. This is the second time today it has happened. It's never happened before today... I haven't gotten an email from AcidMods. Although I don't recall ever getting an eMail from AM.. So who knows.
-TwisT
Added:.
Well I figured out why I haven't received an eMail. It's linked to my yahoo eMail which hasn't worked for years. >.<;'
So somebody could have tried my password, although nothing appears to be changed.
-
i have the same problem 2 fails yestarday
-
Matt is already aware of this attack, I'm sure him and the other admins will work things out asap. I guess all you can do until then is ensure your password is as strong as possible.
-
Matt is already aware of this attack, I'm sure him and the other admins will work things out asap. I guess all you can do until then is ensure your password is as strong as possible.
Yeah they know. It was talked about in the shout box earlier. The site does have security and we have capable admins running things. There is no need to worry ladies and gents.
-TwisT
-
This ip adrress with my fail 192.251.226.206
-
Hello whitetop,
We have detected a failed login attempt on your account.
IP address of the failed login attempt: 92.241.184.106
2 of these when i get up.
why me im nothing lol
-
Hello whitetop,
We have detected a failed login attempt on your account.
IP address of the failed login attempt: 178.63.246.164
again at 11:49am
-
had 2 of these yesterday too whats up with that lol
-
ok, you guys have seen whats going on, obviously. Unfortuantly, these ip addreses are proxy accounts with no real way to trace them. site security atm is very tight. so the only way to hack the site is through a admin or mods profile. this dosnt explane why they are attacking members, but there is not much I can do other than to protect your password. make sure its alpha numeric and case sinsitive
there is also a login security measure in place for all admin that restricts site access from un approved, pre determined ip addresses. you should be able to find this in your profile, I sugest any local or global mods set this up.
-
Same here, i got like 10 messages.
You can not hack deda.
never!
-
just tryed it again
-
so whoever it is just hit mine... sounds like a wannabe haxor. lol
-
LOL not once but twice
Hello crazy-modder,
We have detected a failed login attempt on your account.
IP address of the failed login attempt: 199.48.147.35
Hello crazy-modder,
We have detected a failed login attempt on your account.
IP address of the failed login attempt: 199.48.147.35
-
Hello aZiZ1,
We have detected a failed login attempt on your account.
IP address of the failed login attempt: 193.198.207.8
-
If I had to guess, I would say its a bot that is trying to guess passwords as the users log in/come to the site. every time a new member gets hit the bot trys logging in under the new name.....what would be the point if they logged in as crazy, what could they do? erase your sig...oh no...
-
well i havent gotten anything yet @.@ this makes very little sense... do we really make enough in add revenue to warrant anyone hacking us? what are the motives?
-
what are the motives?
to be :censored:s i think
-
i agree with that.
-
I changed my email address since my old one didn't work. Those times I was logged out, it seems somebody did try to log onto my account. Oh no, I hope they don't post anything without signing it "-TwisT" :beg: XD
174.36.199.202
174.36.199.202
-TwisT
Kilokk was here (and is quite bored) :rofl:
-
None on mine, guess im not inportant enuff to get hacked.. hahah
-
here we go again its already my 6th time getting failed logging ip adress 199.48.147.35 what the hell !! :angry: all ip adress are different?
-
hahah i guess i am inportant now :D! hahaha
Hello Mogler,
We have detected a failed login attempt on your account.
IP address of the failed login attempt: 174.36.199.203
-
81.218.219.122 * 2
At 11:08
-TwisT
-
I got two of these this morning.
Traced a couple of the addresses on this page and they seemed to lead to private computers. Not entirely sure though.
But I am sure that the cracker/s (they do not deserve to be called hackers) are using common passwords to try to access accounts.
If you password is only a word or name, change it now.
Make sure:
- There is at least one symbol or special character
- There is at least one Upper Case Letter
- There is at least three numbers that do not relate to your personal information e.g. Date of Birth
- Update your security question so the answer does not make sense.
-
just had 4 more dame this champs trying it all lol
-
lol still not touched mine
-
lol still not touched mine
it's because they are 1337 hax0rz
got these from the forth to today
86.184.232.109
204.8.156.142 * 2
173.193.221.28
192.251.226.206 * 4
-
I got hit with a few. no real point in posting the IP address since its always different though is there?
-
Yeah, force of habit now tho lol
-
ok so im beefing up security a bit on the server. but now that i have done that i was wondering if people could list every IP used on there accounts and if someone could make a list of IP's that are used and a *1 or *3 etc for how many times it was used.
thanks
lets fly server monkeys and cary on guarding
-
well i dont have the internet in my home at the moment so i dont have a set IP address.
i got hit by 203.174.87.18 twice tho
-
203.174.87.18
174.36.199.202 *2
92.241.184.106
96.226.130.13
208.66.135.190
86.184.232.109
199.48.147.35 *3
178.63.246.164
204.8.156.142 *2
193.198.207.8
173.193.221.28 *4
192.251.226.206 *11
81.218.219.122 *2
174.36.199.203
83.170.92.9 *4
192.251.226.205 *2
86.20.212.49
83.87.66.24 *2
88.142.228.14
83.142.228.14
65.183.151.13
66.96.16.32 *2
174.36.199.200 *4
45.231.120.93
132.142.28.101
81.144.232.108 *2
199.48.147.45
174.36.199.201 *4
95.143.193.145 *2
199.48.147.39 *2
77.54.97.144 *2
list updated 050111 up to matts lock
-
83.170.92.9 x4
that's yesterday and to day so its starting to be the same one for me
-
ok i will update the list again tommorow after more people get chance to post there results
-
192.251.226.205 *2
86.20.212.49
83.87.66.24 *2
-
Here are the attacking IP's
88.142.228.14
83.142.228.14
organisation: ORG-RL20-RIPE
org-name: RapidSwitch Ltd
org-type: LIR
address: iomart Hosting Ltd t/a RapidSwitch
Spectrum House,
Clivemont Road
SL6 7FW Maidenhead
United Kingdom
phone: +442071060730
fax-no: +442071060739
e-mail: abuse@rapidswitch.com
admin-c: AR6363-RIPE
mnt-ref: RAPIDSWITCH-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
source: RIPE # Filtered
-
65.183.151.13
Just got an email today, here is the info, two login attempts were made:
NetRange: 65.183.128.0[Who Is IP][trace][Reverse IP Search] - 65.183.159.255[Who Is IP][trace][Reverse IP Search]
CIDR: 65.183.128.0[Who Is IP][trace][Reverse IP Search]/19
OriginAS:
NetName: BTNETWORK2
NetHandle: NET-65-183-128-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Allocation
NameServer: NS.BURLINGTONTELECOM.COM[Who Is Domain]
NameServer: NS3.BURLINGTONTELECOM.COM[Who Is Domain]
RegDate: 2006-05-16
Updated: 2007-06-07
Ref: http://whois.arin.net (http://whois.arin.net)[Who Is Domain]/rest/net/NET-65-183-128-0-1
Address: 200 Church St
Address: Suite 101
City: Burlington
StateProv: VT
PostalCode: 05401
Also from IP Adress Inspector:
"The Project Honey Pot system has detected behavior from the IP address consistent with that of a comment spammer. Below we've reported some other data associated with this IP"
Spider First Seen: approximately 1 year, 1 month, 3 weeks ago
Spider Last Seen: within 1 month, 1 week
-
199.48.147.35 x2
IP address [?]: 199.48.147.35 [Whois] [Reverse IP]
IP country code: US
IP address country: ip address flag United States
IP address state: California
IP address city: San Francisco
IP postcode: 94159
IP address latitude: 37.7645
IP address longitude: -122.4294
ISP of this IP [?]: Applied Operations
Organization: Applied Operations
Host of this IP: [?]: tor-exit-router35-readme.appliedops.net [Whois] [Trace]
Local time in United States: 2011-01-05 13:57
http://www.stopforumspam.com/ipcheck/199.48.147.35 (http://www.stopforumspam.com/ipcheck/199.48.147.35)
-
Jan. 5, 2010:
66.96.16.32 *2
174.36.199.200 *4
192.251.226.206 *2
45.231.120.93
192.251.226.206 *4
Jan. 4, 2010:
132.142.28.101
81.144.232.108 *2
lmao this kid needs to stop
Post Merge: January 05, 2011, 06:44:54 PM
i've got a few speculations on what kind of attack this is and I won't way because normally they're probably reading this right now.
-
199.48.147.35 x2
IP address [?]: 199.48.147.35 [Whois] [Reverse IP]
IP country code: US
IP address country: ip address flag United States
IP address state: California
IP address city: San Francisco
IP postcode: 94159
IP address latitude: 37.7645
IP address longitude: -122.4294
ISP of this IP [?]: Applied Operations
Organization: Applied Operations
Host of this IP: [?]: tor-exit-router35-readme.appliedops.net [Whois] [Trace]
Local time in United States: 2011-01-05 13:57
http://www.stopforumspam.com/ipcheck/199.48.147.35 (http://www.stopforumspam.com/ipcheck/199.48.147.35)
199.48.147.45
Same guy just hit me! Again! this is crazy..
-
well tor is kinda easy to get real ip but only if you know how encryption works but still if he uses it no way to stop this stuff.
-
The same here.This happened 2 times.
Today i got this email:
Hello nickxab,
We have detected a failed login attempt on your account.
IP address of the failed login attempt: 192.251.226.206
-
i had 2 a few minutes ago from 174.36.199.201
4 yesterday, two from 95.143.193.145 and two from 199.48.147.39
i don't understand what is going on :boxed: ....i just home my account is safe :wacko:
-
i had 2 a few minutes ago from 174.36.199.201
4 yesterday, two from 95.143.193.145 and two from 199.48.147.39
i don't understand what is going on :boxed: ....i just home my account is safe :wacko:
This is being worked on. And AM has pretty wicked security from what I've heard. So no need to worry. If you want to make double sure then make a case sensitive password with numbers and special characters like "!"
-TwisT
-
77.54.97.144 x2
-
YAY MORE :confused: :boxed: :boxed:
173.193.221.28 *2
174.36.199.201 *2
-
again n again..... :censored: i lost count already :angry:
-
i noticed the past few days i would log in then few mins later click a page and it say i need to log in again hey guys could it be part of that hack that was in the shop a few weeks ago
-
i have two all day lol and i have to do login again. i want this stop lol
-
i noticed the past few days i would log in then few mins later click a page and it say i need to log in again hey guys could it be part of that hack that was in the shop a few weeks ago
i would not think it is since they hacked the shop but cannot hack the forum we think its just a kid since there just going for member and not mod/admin much.
-
Lol dude...i just had 2 more this morning which puts my failed logins up to 12 now. We should really find out who this loser is thats doing this and blow up his computer with trojans.
-
meh... we should just put a banner or something saying "JUST MAKE AN ACCOUNT!" cause its obvious (at who is getting hit) that A. they are retarded B. they dont know what they are doing or C. they are 12
-
im thinking a fail at a DDoS attack, got about 7 more, will post ip's asap
-
ok, two pages of post is probably enough.
official,
there is someone or something trying to gain access to the site through peoples account. unfortunatly, there is nothing we can do about this. we cant stop it, control it, or slow it down. The more and more popular the site becomes the more of this we will have to deal with. All we are doing by maintaning a thread like this is giving the so called hacker the attention he wants.
the good news is the site is secure!!!
I am tyred of seeing this as the most recent post, and i am sure new members or potential members are being scared away after seeing this topic.
thread locked.