Someone trying to access accounts here?

A Boojum Snark · 09-14-2013, 01:53 PM

I haven't been here for about three years but I thought I'd drop in and mention this anyway.

I got an automated email from the forum this morning telling me someone had failed to log in to my account 5 times and would be locked out for 15 minutes as a result. I checked my profile before logging in and the last activity was back in 2010 so they didn't have success. The mail gave me the offending IP, which appears to be in St Petersburg (oh boy them russian hackers).

So, yeah. I don't know why they would hit FF accounts or me, maybe thinking it is a dead forum that people won't notice and hope the passwords are the same as steam accounts?
Just thought I'd post in case anyone has an awful password and wants to change it, or if there is anything the admins could do with the heads up.

**squeek.** · 09-14-2013, 08:44 PM

The IP has been banned. Thanks for letting us know.

Afx · 09-17-2013, 09:34 AM

I've had the same email, 5 attempted logins from IP 188.143.234.6
Worth keeping an eye on the forums security, as someones obviously trying to get logins.

A Boojum Snark · 09-17-2013, 06:50 PM

Just got another one now. Banning individual IPs might not be much use. Is there an easy way to check there are any legit users from the 188.143.*.* block so the whole range could be banned? My password is now pretty hefty, but, yeah... they seem to be quite interested.

**squeek.** · 09-17-2013, 08:38 PM

The only accounts using the IP 188.143.* were 4 bot accounts (2 of which were already banned). Went ahead and banned that whole IP range.

aleXtric · 09-17-2013, 09:55 PM

i got the same email from the same IP. its prob valve

09-14-2013, 01:53 PM	#1
A Boojum Snark Join Date: Mar 2007 Posts Rated Helpful 4 Times	Someone trying to access accounts here? I haven't been here for about three years but I thought I'd drop in and mention this anyway. I got an automated email from the forum this morning telling me someone had failed to log in to my account 5 times and would be locked out for 15 minutes as a result. I checked my profile before logging in and the last activity was back in 2010 so they didn't have success. The mail gave me the offending IP, which appears to be in St Petersburg (oh boy them russian hackers). So, yeah. I don't know why they would hit FF accounts or me, maybe thinking it is a dead forum that people won't notice and hope the passwords are the same as steam accounts? Just thought I'd post in case anyone has an awful password and wants to change it, or if there is anything the admins could do with the heads up.
	4 members found this post helpful.

09-14-2013, 08:44 PM	#2
squeek. Stuff Do-er Lua Team Wiki Team Fortress Forever Staff Join Date: Mar 2007 Location: Northern California Class/Position: Rallygun Shooter Gametype: Conc tag (you just wait) Affiliations: Mustache Brigade Posts Rated Helpful 352 Times	The IP has been banned. Thanks for letting us know. __________________ #FF.Pickup ¤ Fortress-Forever pickups My Non-official Maps Released FF_DM_Squeek - FF_2Mesa3_Classic - FF_Siege_Classic Beta FF_Myth - FF_Redlight_Greenlight Sick of the people on the internet, always moanin'. They just moan. - Karl Pilkington
	1 members found this post helpful.

09-17-2013, 08:38 PM	#5
squeek. Stuff Do-er Lua Team Wiki Team Fortress Forever Staff Join Date: Mar 2007 Location: Northern California Class/Position: Rallygun Shooter Gametype: Conc tag (you just wait) Affiliations: Mustache Brigade Posts Rated Helpful 352 Times	The only accounts using the IP 188.143.* were 4 bot accounts (2 of which were already banned). Went ahead and banned that whole IP range. __________________ #FF.Pickup ¤ Fortress-Forever pickups My Non-official Maps Released FF_DM_Squeek - FF_2Mesa3_Classic - FF_Siege_Classic Beta FF_Myth - FF_Redlight_Greenlight Sick of the people on the internet, always moanin'. They just moan. - Karl Pilkington Last edited by squeek.; 09-17-2013 at 08:39 PM.

09-17-2013, 09:55 PM	#6
aleXtric #FF.Pickup Dictator Beta Tester Join Date: Aug 2011 Location: Detroit Gametype: ADL Affiliations: KiNGz . Posts Rated Helpful 100 Times	i got the same email from the same IP. its prob valve __________________ !add #FF.Pickup - Quakenet http://www.ffpickup.com/?p=irc

09-17-2013, 09:34 AM	#3
Afx Join Date: Mar 2007 Posts Rated Helpful 0 Times	I've had the same email, 5 attempted logins from IP 188.143.234.6 Worth keeping an eye on the forums security, as someones obviously trying to get logins.

09-17-2013, 06:50 PM	#4
A Boojum Snark Join Date: Mar 2007 Posts Rated Helpful 4 Times	Just got another one now. Banning individual IPs might not be much use. Is there an easy way to check there are any legit users from the 188.143.. block so the whole range could be banned? My password is now pretty hefty, but, yeah... they seem to be quite interested.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)