By: brewerjerry
- 17th July 2015 at 00:29Permalink- Edited 1st January 1970 at 01:00
attempts by someone ? to access my flypast account
Hi All,
I got an e mail,
5 attempts were made to try to log into my flypast account
No me !
anyone else getting strange attempts to access their account ?
cheers
jerry
By: DCK
- 19th July 2015 at 08:23Permalink- Edited 1st January 1970 at 01:00
Log-in attempts to my account
A few weeks ago I had five log-in attempts to my account. The person (machine) involved was blocked from attempting further, and I got an e-mail as a warning.
I changed my password due to this. I tracked the IP to the States on this occation.
Today, I got another e-mail about five attempted log-ins. This IP could not be traced as it was via a Proxy server.
By: Larry66
- 22nd July 2015 at 22:04Permalink- Edited 1st January 1970 at 01:00
I got a similar email today, 5 attempts were made apparently:
Dear Larry66,
Someone has tried to log into your account on Key Publishing Ltd Aviation Forums with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.
The person trying to log into your account had the following IP address: 176.10.99.205
By: Lincoln 7
- 23rd July 2015 at 09:02Permalink- Edited 1st January 1970 at 01:00
Just had Key get in touch again, same letter, lockdown 15 mins after 5 attempts.
The Pillocks I.P. is 149/202/98/160.
Wouldn't it be nice if at the 5th attempt, 240 Volts could be sent down their line to fry their computer, or better still, them.
By: Newforest
- 23rd July 2015 at 14:45Permalink- Edited 1st January 1970 at 01:00
Your new friend (TO BE!) would seem to be in the Netherlands now. Confuses me that this IP address has moved this year, from France to Germany and now the Netherlands. Not sure how that works. You should be so lucky to have all these potential new friends!
By: snafu352
- 23rd July 2015 at 15:18Permalink- Edited 1st January 1970 at 01:00
Spammers (and worse) seek to form networks of infected personal computers from which hacking, denial of service and spamming attempts are made.
The changing countries as evidenced by the IP addresses simply show that people have been slack and clicked on a link or website that they should not have done whilst not running decent anti virus / security software and thus their computer has been infected.
By: Edgar Brooks
- 24th July 2015 at 13:32Permalink- Edited 1st January 1970 at 01:00
Just had two days of my access being blocked by "Google," demanding my E-mail address and password; I totally ignored it, and went elsewhere, and, today, my access has cleared, as if by magic.
By: Bob
- 24th July 2015 at 14:06Permalink- Edited 1st January 1970 at 01:00
The changing countries as evidenced by the IP addresses simply show that people have been slack and clicked on a link or website that they should not have done whilst not running decent anti virus / security software and thus their computer has been infected.
I think you are spreading fear, uncertainty and doubt with your post. I use a Mac and observe high levels of security and have done for many years, but someone tried to access my forum account, which is held on the Key Publishing server, not my computer!!! So your observation about my computer being infected is fallacious...
But good luck to them, as my password is very robust!
These attempts to crack logins (hack is the wrong term) for forums have little to do with hijacking computers for DDoS etc as you allege, and is more to do with simple spamming of forums by using established accounts to enable spamming by the PM system or to bypass new user limits. New users registering may be restricted in what they can do e.g. only send up to five PMs until they have been a member for x days or blocked from posting links in posts until they have made x posts.
To get around it spammers try to hijack an established account or register, make half a dozen innocuous posts, then lie dormant for a few months. The return to do their spamming hoping their account is now seen as established.
After almost 13 years of working in a very large forum, with very knowledgeable people, I've seen all sorts of tricks by spammers...
By: Moggy C
- 28th July 2015 at 15:02Permalink- Edited 1st January 1970 at 01:00
I think you are spreading fear, uncertainty and doubt with your post.
Correct. This is nothing to do with viruses, trojans or dubious sites that you delete from your browser history. It is simply attempts to find accounts protected by a weak password which can then be used by the spammers.
Posts: 2,841
By: paul178 - 16th July 2015 at 23:15 Permalink - Edited 1st January 1970 at 01:00
Had a crack at mine last night 78.46.51.124
Posts: 917
By: brewerjerry - 17th July 2015 at 00:29 Permalink - Edited 1st January 1970 at 01:00
attempts by someone ? to access my flypast account
Hi All,
I got an e mail,
5 attempts were made to try to log into my flypast account
No me !
anyone else getting strange attempts to access their account ?
cheers
jerry
Posts: 16,832
By: Moggy C - 17th July 2015 at 07:19 Permalink - Edited 1st January 1970 at 01:00
Have you tried looking at the top post in the forum?
Moggy
Moderator
Posts: 8,847
By: Newforest - 17th July 2015 at 07:31 Permalink - Edited 1st January 1970 at 01:00
That would appear to be a 'pillock' , to quote Jim, from Nuremberg, Germany.
Posts: 16,832
By: Moggy C - 17th July 2015 at 07:50 Permalink - Edited 1st January 1970 at 01:00
Moggy
Posts: 265
By: Sgt.Austin - 17th July 2015 at 21:03 Permalink - Edited 1st January 1970 at 01:00
The 'pillock' that tried hacking my account in June was from France it seems.
Posts: 1,318
By: DCK - 19th July 2015 at 08:23 Permalink - Edited 1st January 1970 at 01:00
Log-in attempts to my account
A few weeks ago I had five log-in attempts to my account. The person (machine) involved was blocked from attempting further, and I got an e-mail as a warning.
I changed my password due to this. I tracked the IP to the States on this occation.
Today, I got another e-mail about five attempted log-ins. This IP could not be traced as it was via a Proxy server.
Anyone else get these log-in attempts?
Posts: 8,847
By: Newforest - 19th July 2015 at 10:08 Permalink - Edited 1st January 1970 at 01:00
http://forum.keypublishing.com/showthread.php?134134-ACCOUNT-HACKING-ATTEMPTS-MERGED-THREAD
Not many by the look of it! :D
Posts: 1,318
By: DCK - 19th July 2015 at 14:01 Permalink - Edited 1st January 1970 at 01:00
Sparse! :D
Posts: 495
By: Larry66 - 22nd July 2015 at 22:04 Permalink - Edited 1st January 1970 at 01:00
I got a similar email today, 5 attempts were made apparently:
Dear Larry66,
Someone has tried to log into your account on Key Publishing Ltd Aviation Forums with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.
The person trying to log into your account had the following IP address: 176.10.99.205
All the best,
Key Publishing Ltd Aviation Forums
Posts: 8,847
By: Newforest - 23rd July 2015 at 07:45 Permalink - Edited 1st January 1970 at 01:00
This miscreant would appear to be situated in the city of Baar in Switzerland. Rather peculiar that these attempts are now coming from Europe.
Posts: 8,306
By: Lincoln 7 - 23rd July 2015 at 09:02 Permalink - Edited 1st January 1970 at 01:00
Just had Key get in touch again, same letter, lockdown 15 mins after 5 attempts.
The Pillocks I.P. is 149/202/98/160.
Wouldn't it be nice if at the 5th attempt, 240 Volts could be sent down their line to fry their computer, or better still, them.
Jim
Lincoln .7
Posts: 8,847
By: Newforest - 23rd July 2015 at 14:45 Permalink - Edited 1st January 1970 at 01:00
Your new friend (TO BE!) would seem to be in the Netherlands now. Confuses me that this IP address has moved this year, from France to Germany and now the Netherlands. Not sure how that works. You should be so lucky to have all these potential new friends!
Posts: 2,248
By: snafu352 - 23rd July 2015 at 15:18 Permalink - Edited 1st January 1970 at 01:00
Spammers (and worse) seek to form networks of infected personal computers from which hacking, denial of service and spamming attempts are made.
The changing countries as evidenced by the IP addresses simply show that people have been slack and clicked on a link or website that they should not have done whilst not running decent anti virus / security software and thus their computer has been infected.
Posts: 2,841
By: paul178 - 24th July 2015 at 12:36 Permalink - Edited 1st January 1970 at 01:00
I have a decent anti virus and this forum to stop these individuals. Thakyou key publishing!
Posts: 894
By: Edgar Brooks - 24th July 2015 at 13:32 Permalink - Edited 1st January 1970 at 01:00
Just had two days of my access being blocked by "Google," demanding my E-mail address and password; I totally ignored it, and went elsewhere, and, today, my access has cleared, as if by magic.
Posts: 3,566
By: Bob - 24th July 2015 at 14:06 Permalink - Edited 1st January 1970 at 01:00
I think you are spreading fear, uncertainty and doubt with your post. I use a Mac and observe high levels of security and have done for many years, but someone tried to access my forum account, which is held on the Key Publishing server, not my computer!!! So your observation about my computer being infected is fallacious...
But good luck to them, as my password is very robust!
These attempts to crack logins (hack is the wrong term) for forums have little to do with hijacking computers for DDoS etc as you allege, and is more to do with simple spamming of forums by using established accounts to enable spamming by the PM system or to bypass new user limits. New users registering may be restricted in what they can do e.g. only send up to five PMs until they have been a member for x days or blocked from posting links in posts until they have made x posts.
To get around it spammers try to hijack an established account or register, make half a dozen innocuous posts, then lie dormant for a few months. The return to do their spamming hoping their account is now seen as established.
After almost 13 years of working in a very large forum, with very knowledgeable people, I've seen all sorts of tricks by spammers...
Posts: 197
By: Mike meteor - 28th July 2015 at 11:16 Permalink - Edited 1st January 1970 at 01:00
Just happened to me. IP address 171.25.193.77
Thanks, Key for the tip off.
Posts: 8,847
By: Newforest - 28th July 2015 at 14:19 Permalink - Edited 1st January 1970 at 01:00
Now you have a Swedish 'friend' in Stockholm looking for you! :D
Posts: 16,832
By: Moggy C - 28th July 2015 at 15:02 Permalink - Edited 1st January 1970 at 01:00
Correct. This is nothing to do with viruses, trojans or dubious sites that you delete from your browser history. It is simply attempts to find accounts protected by a weak password which can then be used by the spammers.
Moggy