ACCOUNT HACKING ATTEMPTS, MERGED THREAD

Profile picture for user paul178

Member for

9 years 4 months

Posts: 2,841

Had a crack at mine last night 78.46.51.124

Member for

16 years 2 months

Posts: 915

attempts by someone ? to access my flypast account

Hi All,
I got an e mail,
5 attempts were made to try to log into my flypast account
No me !
anyone else getting strange attempts to access their account ?
cheers
jerry

Profile picture for user Moggy C

Member for

20 years 7 months

Posts: 16,831

Have you tried looking at the top post in the forum?

Moggy
Moderator

Profile picture for user Newforest

Member for

15 years 3 months

Posts: 8,831

That would appear to be a 'pillock' , to quote Jim, from Nuremberg, Germany.

Profile picture for user Moggy C

Member for

20 years 7 months

Posts: 16,831

Spam-O-Matic Statistics
768,853 Spammers Denied Registration

Moggy

Member for

11 years 4 months

Posts: 265

The 'pillock' that tried hacking my account in June was from France it seems.

Profile picture for user DCK

Member for

14 years 5 months

Posts: 1,318

Log-in attempts to my account

A few weeks ago I had five log-in attempts to my account. The person (machine) involved was blocked from attempting further, and I got an e-mail as a warning.
I changed my password due to this. I tracked the IP to the States on this occation.

Today, I got another e-mail about five attempted log-ins. This IP could not be traced as it was via a Proxy server.

Anyone else get these log-in attempts?

Profile picture for user Larry66

Member for

14 years 9 months

Posts: 495

I got a similar email today, 5 attempts were made apparently:

Dear Larry66,

Someone has tried to log into your account on Key Publishing Ltd Aviation Forums with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 176.10.99.205

All the best,
Key Publishing Ltd Aviation Forums

Profile picture for user Newforest

Member for

15 years 3 months

Posts: 8,831

This miscreant would appear to be situated in the city of Baar in Switzerland. Rather peculiar that these attempts are now coming from Europe.

Profile picture for user Lincoln 7

Member for

10 years 1 month

Posts: 8,306

Just had Key get in touch again, same letter, lockdown 15 mins after 5 attempts.
The Pillocks I.P. is 149/202/98/160.
Wouldn't it be nice if at the 5th attempt, 240 Volts could be sent down their line to fry their computer, or better still, them.

Jim
Lincoln .7

Profile picture for user Newforest

Member for

15 years 3 months

Posts: 8,831

Your new friend (TO BE!) would seem to be in the Netherlands now. Confuses me that this IP address has moved this year, from France to Germany and now the Netherlands. Not sure how that works. You should be so lucky to have all these potential new friends!

Member for

12 years 6 months

Posts: 2,248

Spammers (and worse) seek to form networks of infected personal computers from which hacking, denial of service and spamming attempts are made.
The changing countries as evidenced by the IP addresses simply show that people have been slack and clicked on a link or website that they should not have done whilst not running decent anti virus / security software and thus their computer has been infected.

Profile picture for user paul178

Member for

9 years 4 months

Posts: 2,841

I have a decent anti virus and this forum to stop these individuals. Thakyou key publishing!

Member for

11 years 3 months

Posts: 894

Just had two days of my access being blocked by "Google," demanding my E-mail address and password; I totally ignored it, and went elsewhere, and, today, my access has cleared, as if by magic.

Profile picture for user Bob

Member for

20 years 7 months

Posts: 3,560


The changing countries as evidenced by the IP addresses simply show that people have been slack and clicked on a link or website that they should not have done whilst not running decent anti virus / security software and thus their computer has been infected.

I think you are spreading fear, uncertainty and doubt with your post. I use a Mac and observe high levels of security and have done for many years, but someone tried to access my forum account, which is held on the Key Publishing server, not my computer!!! So your observation about my computer being infected is fallacious...
But good luck to them, as my password is very robust!

These attempts to crack logins (hack is the wrong term) for forums have little to do with hijacking computers for DDoS etc as you allege, and is more to do with simple spamming of forums by using established accounts to enable spamming by the PM system or to bypass new user limits. New users registering may be restricted in what they can do e.g. only send up to five PMs until they have been a member for x days or blocked from posting links in posts until they have made x posts.
To get around it spammers try to hijack an established account or register, make half a dozen innocuous posts, then lie dormant for a few months. The return to do their spamming hoping their account is now seen as established.

After almost 13 years of working in a very large forum, with very knowledgeable people, I've seen all sorts of tricks by spammers...

Member for

5 years 10 months

Posts: 195

Just happened to me. IP address 171.25.193.77
Thanks, Key for the tip off.

Profile picture for user Newforest

Member for

15 years 3 months

Posts: 8,831

Now you have a Swedish 'friend' in Stockholm looking for you! :D

Profile picture for user Moggy C

Member for

20 years 7 months

Posts: 16,831

I think you are spreading fear, uncertainty and doubt with your post.

Correct. This is nothing to do with viruses, trojans or dubious sites that you delete from your browser history. It is simply attempts to find accounts protected by a weak password which can then be used by the spammers.

Moggy