Pre-Dawn Account Hacker

jamesson1980 · 21-12-2010, 03:33 PM

Today in my hotmail, I get this:

jamesson1980,

Your account on Australian Ford Forums has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: xxxxxx

I can give you the offending IP address if you like, I really don't think it's my own. Can any mods shed some light on this? Is it common? It apparently happened at about 4:30am 21-12-10. The strangest bit is that I'm automatically logged on when I open Ford Forums and never really even need to enter my password. My concern is that it's some bug in my own computer which I'll have to hunt down, but I was hoping for a bit of a clue that I might be looking in the right spot.

Thanks in advance, and if this is common and I've created some duplicate feel free to delete this and point me to the right place

thanks again

**Falcon Coupe** · 21-12-2010, 04:17 PM

Can you pm me the IP address, I'll run it through the IP data base and see if the culprit is already a member.

jamesson1980 · 21-12-2010, 04:37 PM

no worries. It happened to me from another forum, turned out to be a bug on their server trying to milk members bank details out. PM coming.

**Falcon Coupe** · 21-12-2010, 04:43 PM

Well it may be a bug here too, that or said person is not a member.
The I.P address came up clean.

My poor XF · 21-12-2010, 04:47 PM

i got the same email. Didnt notice any changes though i was able to log on as usual (stay logged in anyway)

sleek7 · 21-12-2010, 04:48 PM

www.whatsmyip.org

Compare yours to the one in your email (assuming your not on dial-up and dont turn off your modem at night).

ThaFlash · 21-12-2010, 04:48 PM

see if it's your own all the same...

go to command prompt type ipconfig

sleek7 · 21-12-2010, 04:49 PM

Quote:

Originally Posted by HP4ME

see if it's your own all the same...

go to command prompt type ipconfig

This will give him his internal IP, not his public one. The one in the email will be public IP.

**Falcon Coupe** · 21-12-2010, 04:50 PM

So that's three reporting the same now, maybe Admin can shed some light.

My poor XF · 21-12-2010, 04:51 PM

Its a different IP to both my computer and Iphone and both arent accessing the net at the time.

jamesson1980 · 21-12-2010, 04:54 PM

my IP looks nothing like the one in the email.. and if Coupe has checked all members IP addy's i think we can assume it's not our own as we're members??

sleek7 · 21-12-2010, 04:57 PM

Quote:

Originally Posted by jamesson1980

my IP looks nothing like the one in the email.. and if Coupe has checked all members IP addy's i think we can assume it's not our own as we're members??

Correct......unless it was Coupe!!!!

jamesson1980 · 21-12-2010, 05:02 PM

Quote:

Originally Posted by sleek7

Correct......unless it was Coupe!!!!

FALCON COUPE
Join Date: Dec 2004
Location: Melbourne
Posts: 8,089
Rep Power: 100
Falcon Coupe is a GT-E, near the top
VS.
JAMESSON1980
Join Date: Feb 2009
Location: Carrum Downs
Posts: 365
Rep Power: 25
jamesson1980 is a G6 - entry level with style

What's he gonna do, steal my 25 rep points??

**Falcon Coupe** · 21-12-2010, 05:02 PM

Quote:

Originally Posted by sleek7

Correct......unless it was Coupe!!!!

Curses, my cunning plan has backfired..... *Runs off to delete thread and ban everyone who posted in here*

ThaFlash · 21-12-2010, 05:05 PM

clevo mafia hit no doubt! hehehe

Geez Louise · 21-12-2010, 05:33 PM

I copped it too this morning. So thats another one.

**russellw** · 21-12-2010, 06:26 PM

The offending IP has been blocked - it looks as if several attempts were made but none successful.

Cheers
Russ

99AUXR · 21-12-2010, 08:28 PM

Quote:

Originally Posted by russellw

it looks as if several attempts were made but none successful.

Cheers
Russ

ford forums user tough passwords and ultra hi-tec encryption login system

XRDRIFT · 21-12-2010, 10:32 PM

I received the exact same email at 5.30AM this morning. I highly doubt my AFF acc was trying to be 'hacked'. Damm scammers.

Doing a Malware/Spybot scan anyways just to make sure. Peace of mind never hurts.

Save a whale, Harpoon a Scammer/HAcker

3vXT · 22-12-2010, 12:45 AM

This is just like that movie Swordfish.

Velociraptor82 · 22-12-2010, 12:33 PM

Inregards to tracking the public Ip address, if you have a dynamic ip address provided by your ISP then it is possible that your IP address has changed since the attempted hack. Your ISP may keep a history of IP addresses but this is usally for tracking things like credit card fraud and not typically availble to the ISP customer service rep.

I prefer dynamic ip's as it is a little harder to tack a user's activities. i see the only real benefit of a static ip is for hosting websites.

Quote:

Originally Posted by ken2903

This is just like that movie Swordfish.

...without the girl on your lap and a gun to your head...

3vXT · 22-12-2010, 12:36 PM

Quote:

Originally Posted by Velociraptor82

...without the girl on your lap and a gun to your head...

Hey, speak for yourself buddy

Actually, I had forgot all about that scene. Might be time for a re-watch

chrisfpv · 29-12-2010, 07:38 PM

Even though this has been resolved, this happened to me too about a week or so ago.