Who has been trying to login to my account AGAIN??
 

Received email from forum telling me that IPA 216.164.19.30
has tried 5 times to logon to my account this morning. Any one have an idea who the hell this maybe??:confused:

Some hacker kiddy. Looks like an RCN cable customer from the Philadelphia area :

Name: 216-164-19-30.c3-0.drf-ubr1.atw-drf.pa.cable.rcn.com
Address: 216.164.19.30

http://rcn.com/dc-metro/

Git

I could not find any users here with that IP in the database. Password attacks like this have been an ongoing issue here. I advise that you and everyone else set a strong password of 6-8 characters composed of numbers, letters, and symbols. That way, they will not be able to break it easily.

20 chars is better :)

Git

20 characters with numbers and uppercase and lowercase letters.

zeuscane

Thanks for this Git, I tried using IPA 216.164.19.30 but found nothing:confused:
How did you get that info??

simply tracert ;)

best regards

216.164.19.30
IP:
216.164.19.30
server location:
Northampton in United States
ISP:
RCN

Try this hobferret: http://www.ip-adress.com/reverse_ip/216.164.19.30

Can be a proxy server or tor client...Don't spend time, simply change the password !

change password every month or 3 weeks and you won't deal any problem.

Use nslookup to get name, then put rcn.com into browser. As you see, they operate in PA in usa, and there is pa in the name. The rest of the name probably tells you the area and town. Some ISP's are using that scheme now so they can see where an address is physically without lookup. Also allows people you connect to to see which city you live in :(

Git

You can use lastpass service, to generate and store your passwords and remember just one strong master password to access them all.

You may save some gray cells in the process as well :)

KeePass is good and it is open source so can be trusted a bit more. What has this got to do with the thread though? :)

Git

LastPass is for me, it's just more fleshed out. Never heard of KeePass though, I'll check it out.

@:hobferret
change your password.
And don't save your password on the proxy as tor browser,
may be attacked by this way or another proxy.
How can monitor if some want to hack my account or another?
other than wireshark.

Best Regards
ــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــ
Alen Khoury

This show how this forum is worthy. Nevertheless, maybe this ip is for proxy.

Perhaps it's the APTguy? :rolleyes: http://forum.exetools.com/showpost.php?p=93994&postcount=3

Same here:

Host: 199.200.120.37
Location: United States
City: Mescalero, NM 88340
Organization: MATI

Another attempt from China's IP: 1.82.191.169

Another attempt to my account from here: IP Location China China Beijing China Unicom Beijing Province Network
ASN China AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network (registered Jan 09, 1996)
Resolve Host freemail182-248.sina.com
Whois Server whois.apnic.net
IP Address 202.106.182.248

Another attempt to my account from: 115.231.173.3
General IP Information
IP: 115.231.173.3
Decimal: 1944562947
Hostname: 115.231.173.3
ISP: China Telecom Zhejiang
Organization: China Telecom Jiaxing
Services: None detected
Type: Broadband
Assignment: Static IP

got the message:
-------------------
Dear gemuz,

Someone has tried to log into your account on EXETOOLS FORUM with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 116.236.216.116
---------------

If there is a user with this IP please take action.

Someone tried on mine as well:

Spam bot ip https://www.stopforumspam.com/ipcheck/116.236.216.116
and https://www.stopforumspam.com/ipcheck/202.106.182.248

Bots always have new ways to enter different forums.
I dont think its hackers trying to get in, its just the login pages that bots are targeting. The Bullitin version used here is from 2009 v 3.8.4 , bots have evolved since then, even bypassing capthas, also the bullitin is nulled. even more security risk.

but because of the invite system, they never get in. Or we would see alot of parfume and health products here :D

Another attempt again from China's IP: 61.175.209.186

Another attempt from 213.149.105.12

someone like did that

I see we have so many accounts being attempted here.
Is it just bot or childish hackers?

Any suggestion?

I believe that the targets of hackers are those that may render to them something, so they wouldn't spend time trying to hack accounts in exetools, in my opinion, most likely, some disgruntled Member who wishes to mess up the forum.

Attempt from 182.239.95.136. Strange, it's the first time for almost ... 10 years.

https://www.stopforumspam.com/ipcheck/182.239.95.136 spam again
Maybe Server owner can block the ip range.

Also got some kid trying this:

25.02.2015 ~13:39 GMT+1
~Zer0

Also had the same

Me too:
It's first time since registration.

Another spammer
 

same history here and it is a spammer (thanks Storm Shadow).

Some weeks ago, i noticed, that the last visited timestamp was "wrong", i.e. it showed a
different value than my last login. I didn't take care at that time, but now ...

Anyhow, i didn't get a wrong login info ...