Attempt to compromise my account?

civic2988

New member
Joined
Aug 4, 2013
Messages
6
Reaction score
0
This is weird but I haven't visited this forum since 8/12/2013 according to the site but I had an email saying someone attempted to log into my account 5 times and failed and my account was locked for 15 mins from anyone logging in.

I googled the IP which was 112.19.14.196 and it comes from Beijing, China (China Mobile Communicatons Corporation).

What the hell!?!? I only ever posted here a handful of times in 2013 and that's it. Is this site being hacked or something? I went ahead and changed my password and email on this account.



Here's the exact email I got:


Dear civic2988,

Someone has tried to log into your account on Auto Geek Online Auto Detailing Forum with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 112.19.14.196

All the best,
Auto Geek Online Auto Detailing Forum
 
I got the same email a few days ago but the attempt on my account came from the San Diego area based on the IP address.
 
That is scary. Change your password and make sure there have been no weird charges on your accounts, even if it is for 0.02. Sometimes hackers test accounts to see if you are paying attention. Since you have not posted in awhile you may have been chosen for that reason. I had my identity stolen 6 years ago and iI am still getting charges from credit cards I didn't own.
 
Just got the same email. Ive contacted Nick to see what he has to say
 
Never heard of this type of issue before and I've been posting to forums like this since the software was introduced.


Detail Fest kept everyone super busy since all of last week and through the weekend. As everyone returns to work we'll have a chance to look into this and see what's going on.


:xyxthumbs:
 
Maybe a coincidence but similar threads appearing on Detailing World
 
I think I posted the same thing on here and I had it on another forum. No real reason to change your password, check other sites you frequent for PM's or posts that aren't by you. I think it's mostly used by scammers to mass PM groups.
 
There's a lot of forums that have been under attack recently. No one is out to get you or this forum in particular, just a lot of spammer activity.

Other forums were attacked as well.
 
What's the potential risk here? Seems like a lot of work on their end for zero reward.
 
What's the potential risk here? Seems like a lot of work on their end for zero reward.

Didn't some Greeks say the same thing about a wooden horse?

Maybe they have calculated the greatest weakness in western civilisation is a bunch of people who will spend 40 pages arguing about a wax.
 
As of recently theres has been an increase in attacks on vbulletin forums, one of the attacks includes attenting to get access to members accounts. This message is just to let you know someone has tried to log in to your account similar to what msn and google sent when someone tries to gain access to your account. We are going to be upgrading the server and adding additional firewall to prevent future attacks, we are doing the final testing on the server so we should be going live in the next few days.
 
This happened to me on Corvette Forum. I went and changed password.

My IP address was from Louisiana ...
 
I'm no cyber expert, but just finished a year and a half long Digital Forensics program (which was pretty awesome). Testing passwords takes very little effort, especially if an automated brute-force program is used. The 5-attempts-to-lockout is a safety measure so the program cannot continue to test passwords until successfully retrieving yours.

Also, while IP tracing works well, it doesn't mean the actual perp is using the source IP--it could be someone logging into someone else's unsecured wireless router/repeater.

Best defense? Make a pwd with upper/lower case letters with at least one number and one special character.
 
Back
Top