someone tried to log into my account

[djkemp1]

hi all,

i had an email to say that my account was locked for 15 mins as someone tried to log into it.

can someone tell me why they would try that? what do they gain from trying to log into someone else's account.

i checked the IP and it was from an american ISP (Earthlink)

[dodgy368]

hi all,

i had an email to say that my account was locked for 15 mins as someone tried to log into it.

can someone tell me why they would try that? what do they gain from trying to log into someone else's account.

i checked the IP and it was from an american ISP (Earthlink)

Same just happened to me, don't know why they tried to get in but gonna change my password as it's easy to crack.

"Your account on FileSharing Talk has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.
The person trying to log into your account had the following IP address: 24.110.30.173"

Hostname Country Code Country Name Region Region Name (http://www.maxmind.com/app/fips10_4) City Postal Code Latitude Longitude ISP Organization Metro Code (http://www.maxmind.com/app/metro_code) Area Code 24.110.30.173 US United States FL Florida Lake Mary
28.7578 -81.3397 EarthLink EarthLink 534 407


I've worked out why they want to get in, so they can get into the Invite Section!

[qusai]

Happened to me too but didn't think too much of it.
If they wanted to get into the invite section, they should have tried it on someone that's a little more active maybe ;)

[tesco]

That same IP has been trying to get to a few different people's accounts.
Unfortunately there's nothing I can but ban that IP, there's no user with that ip.

[lynx]

That same IP has been trying to get to a few different people's accounts.
Unfortunately there's nothing I can but ban that IP, there's no user with that ip.Good, you've seen this now.

I've just PMed you asking you to IP block it. Thanks.

[phrenzy]

[QUOTE=dodgy368;1970488][quote=djkemp1;1970358]hi all,

i
The person trying to log into your account had the following IP address: 24.110.30.173"

Hostname Country Code Country Name Region Region Name (http://www.maxmind.com/app/fips10_4) City Postal Code Latitude Longitude ISP Organization Metro Code (http://www.maxmind.com/app/metro_code) Area Code 24.110.30.173 US United States FL Florida Lake Mary
28.7578 -81.3397 EarthLink EarthLink 534 [SIZE=-1]407


The IP that tried to log in on my account was from Atlanta GA.

[Skiz]

Surely this is something automated. I can't see any one person attempting to access this many accounts.

[djkemp1]

yeah same ip as the one trying to get into my account, whats going on, could it be a virus (worm) on the filesharingtalk servers?

[tesco]

a virus on our servers that tries to log in to people's accounts? :unsure: :P

[Imagine_If]

No but perhaps a bot.

[djkemp1]

any ideas anyone whats happening?

[Ludvig]

It happened to me about a month ago:

Dear Ludvig,

Your account on FileSharing Talk has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 203.171.87.11 (http://203.171.87.11/)

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:
http://filesharingtalk.com/vb3/login.php?do=lostpw (http://filesharingtalk.com/vb3/login.php?do=lostpw)

All the best,

FileSharing Talk

Sadly,the creature who did that to me is from Australia:

:(

IP Information 203.171.87.11

Record Type:IP
AddressIP Location:http://img.domaintools.com/flags/au.gif Australia
Internet Service Providers Australia Reverse DNS:cust6667.nsw01.dataco.com.au

Blacklist Status:Clear

inetnum: 203.171.64.0 - 203.171.127.255
netname: Dataco
descr: Internet Service Providers, Australia
country: AU
admin-c: LR20-AP
tech-c: LR20-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-AU-DATACO
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: http://img.domaintools.com/email.pgif?md5=677b7eb54f1bc0f106ee0bec0cf3b496 (http://whois.domaintools.com/domain-privacy/) 20041105
source: APNIC

person: LORRAINE ROSE
nic-hdl: LR20-AP
e-mail: http://img.domaintools.com/email.pgif?md5=cb1996e3ac0fd41ec3b6e5aa4aacccae (http://whois.domaintools.com/domain-privacy/)
address: 10 Jessica Blvd, Minyama, QLD 4575
phone: +61-7-54442685
country: AU
changed: http://img.domaintools.com/email.pgif?md5=cb1996e3ac0fd41ec3b6e5aa4aacccae (http://whois.domaintools.com/domain-privacy/) 20040108
mnt-by: MAINT-NEW
source: APNIC

[Barbarossa]

Surely this is something automated. I can't see any one person attempting to access this many accounts.

That's what people said about the counting thread :dry:



@ludwig - we blocked that IP ages ago because of similar reports, but thx ;)

[Ludvig]

Toujours prêt à t'aider,garçon ! ;)

Ps:
LudVig,please,Barbarossa.With "w",it's the german orthograph.

[Demigod]

Hmm, weird. Just wondering but when this happens, do you get kicked off your account on FST or will you only get that message when trying to log in?

If it does kick you off your account, I can see how that'll be a major inconvenience, especially if someone happens to be doing a trade or something. In addition, if they just manage to get in, it'll be a security issue as well since some users save all of their PMs, including those with their e-Mail addresses.

[Barbarossa]

If it does kick you off your account, I can see how that'll be a major inconvenience, especially if someone happens to be doing a trade or something. In addition, if they just manage to get in, it'll be a security issue as well since some users save all of their PMs, including those with their e-Mail addresses.

I'd advise all users to use a "strong" password on their FST accounts, if they're PMs contain sensitive information.

Strong password = at least 6 characters, including one or more numerical characters



P.S. Sorry, Ludvig :pinch:

[lynx]

If it does kick you off your account, I can see how that'll be a major inconvenience, especially if someone happens to be doing a trade or something. In addition, if they just manage to get in, it'll be a security issue as well since some users save all of their PMs, including those with their e-Mail addresses.

I'd advise all users to use a "strong" password on their FST accounts, if they're PMs contain sensitive information.

Strong password = at least 6 characters, including one or more numerical characters



P.S. Sorry, Ludvig :pinch:Using a "v" instead of a "w" is a cunning trick too, how many hackers would think of that? ;)