AAC Hack Attacks, recent

Thread Starter

#12

Joined Nov 30, 2010
18,224
I've been getting notices that are automatically generated by V-Bulletin telling me that somebody is Russia is trying to log in as me, more than once. I have notified the mods and Geo told me I could make a public announcement, so here it is:
Watch for hack attacks on your account here.

Now I post the form letter than V-Bulletin sends me.

Dear #12,

Someone has tried to log into your account on All About Circuits Forum with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 188.143.232.144

All the best,
All About Circuits Forum

This has been a public service announcement.
 

nerdegutta

Joined Dec 15, 2009
2,689
Whois - lookup:

[Querying whois.arin.net]
[Redirected to whois.ripe.net:43]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '188.143.232.0 - 188.143.232.255'

inetnum: 188.143.232.0 - 188.143.232.255
netname: LeonLundberg-net
descr: net for dedicated server client
country: RU
admin-c: LL4959-RIPE
tech-c: LL4959-RIPE
status: ASSIGNED PA
mnt-by: MNT-PIN
source: RIPE # Filtered

person: Leon Lundberg
address: Liljerum Grenadjartorpet 71
address: 173 57 TOMTEBODA
phone: +467348510378
nic-hdl: LL4959-RIPE
mnt-by: MNT-PINSUPPORT
source: RIPE # Filtered

% Information related to '188.143.232.0/23as44050'

route: 188.143.232.0/23
descr: Route to PIN
origin: as44050
mnt-by: MNT-PIN
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.60.2 (WHOIS2)

I don't know if this info is trustable, but Leon Lundberg sound really swedish to me...
 

Thread Starter

#12

Joined Nov 30, 2010
18,224
Geo told me the hack is coming from Russia, so he probably already did this search.
Any members in Russia? If so, go to Liljerum Grenadjartorpet 71 and smack Leon on the head for me.:D
 

DerStrom8

Joined Feb 20, 2011
2,390
The following shows up in a google search:

This IP addres is trying to hack my site.. - 2012-07-16
This IP addres is trying to hack my site This IP addres is trying to hack my site - 2012-09-17
This IP address is trying to hack my site: 188.143.232.144 High traffic to our site causing cpu high usage causing server to fall over. - 2012-10-07
This IP address is sending High traffic to our sites causing Server cpu overuse which resulted in my host asking me to optimise my sites or they would shut them down. Tracing high use sites came back to Googlebot and this IP. Google had 100's of entries, this IP had 4! Solution, Add IP to IP Block. - 2012-11-19
This IP addres is trying to hack my site 2013-02-06 - 2013-02-06
This IP addres is trying to hack my site 2013-04-24 - 2013-03-23
his IP addres is trying to hack my site - 2013-04-02
Hacker - 2013-04-06
Another loser amateur hacker who tried to hack one of my client's websites. IP address 188.143.232.144 comes back to a Saint Petersburg provider. - 2013-04-07
This ip address is trying to get in our site too! 9-04-2013 - 2013-04-08
Tried to hack my account - 2013-05-12
Loser trying to login into iPhone Jailbreak community site with my account - 2013-05-13
this ip address is trying to hack into an account i have with a site.. losers - 2013-05-13
This IP address is trying to hack into an account I have with a site - 2013-05-13
This IP address is trying to hack into an account I have with a site - 2013-05-13
Trying to hack an account I have with a site. - 2013-05-13
188.143.232.144 some one is trying to log in to my accounts from this address. - 2013-05-13
Got a notification from a Web forum where I am a member that someone at this IP address has tried to login to the forum using my ID. They failed and I was notified. - 2013-05-13
IP was used to attempt to log into a Las Vegas website 5 times. - 2013-05-13
This ip address is trying to hack one of my accounts in a Forum - 2013-05-14
This IP address is trying to hack into an account I have with a site - 2013-05-14
tried to hack forum account - 2013-05-14
This IP address is trying to hack into an account I have with a site - 2013-05-14
This IP address is trying to enter an account of mine. - 2013-05-14
This IP is trying to hack an account I have with a site. - 2013-05-14
This IP address tried to hack into my account on a web forum I belong to. - 2013-05-14
this is IP unsucessfully tried to log into forum site. locked out after 5 attempts. go away hacker scum. - 2013-05-14
This loser tired to hack into my mustang forum username. tried 5 times and all failed. - 2013-05-14
It's trying to get into one of my accounts on a site. Failed. - 2013-05-14
Yep trying to log into one of my accounts as well. Rejected. - 2013-05-14
IP is attempting to access a forum account of mine. - 2013-05-15
This IP address is trying to hack into three accounts I have with different sites - 2013-05-15
188.143.232.144. Trying to dictionary password attack my forum. - 2013-05-15
This IP is hacking our site - 2013-05-15
This IP address is trying to hack into an account I have with a site - 2013-05-15
this IP address Tried to hack my account in valamusic.com - 2013-05-15
Tried to get into my ready up live account - 2013-05-15
Trying to hack a forum account I'm a member of. - 2013-05-15
This IP address is trying to hack into an account I have with a site - 2013-05-15
This IP tried to log into my account on a forum I am a member of. - 2013-05-15
This IP address is trying to hack into an account I have with a site - 2013-05-15
This IP address tried to hack a forum account I'm a member of. I was notified by forum. - 2013-05-16
This IP address is trying to hack into an account I have with a site - 2013-05-16
Trying to a one of my forum accounts, and failed. - 2013-05-16
Received a message saying someone with this IP address was trying to log-in to my account but had failed - 2013-05-16
Tried hacking into my account on a forum. - 2013-05-16
Tried to access a forum account and failed. - 2013-05-16
Trying to login to a forum using my username - 2013-05-16
This IP address tried to hack a forum account I'm a member of. I was notified by forum. - 2013-05-16
same here tried to access forum account dont know why nothing to gain what a twit - 2013-05-16
Tried to hack my site - 2013-05-16
This IP address is trying to hack into an account I have with a site - 2013-05-17
This IP addres is trying to hack our site - 2013-05-17
Trying to hack a forum account I'm a member of. - 2013-05-17
 

nerdegutta

Joined Dec 15, 2009
2,689
I used Geos site to check my IP. I came up in Oslo, Norway.

I am not in Oslo. After reading some of the comments,he seems like a buzy guy...
 

DerStrom8

Joined Feb 20, 2011
2,390
It tracks my position pretty well, so I assumed it worked.
Mine puts me all the way up in Portland Maine--well over a hundred miles away, two hundred if you consider the driving distance.

P.S. In my part of the country, 100/200 miles is a very long way :D:p
 

Wendy

Joined Mar 24, 2008
23,797
I tend to use complex passwords, long and random, and every site has its own. More than that you can not do much about.
 

THE_RB

Joined Feb 11, 2008
5,438
...
Someone has tried to log into your account on All About Circuits Forum with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.
...
Gee, I wonder if you have annoyed some juvenile narcissistic egomaniac wanna-be hacker on the forum recently? ;)

Hmmm, let me think...
 

atferrari

Joined Jan 6, 2004
5,017
Mine puts me all the way up in Portland Maine--well over a hundred miles away, two hundred if you consider the driving distance.

P.S. In my part of the country, 100/200 miles is a very long way :D:p
Depends of how you travel. By walking, sure it is! :)

I've been driving even more than that, some times up to four times a week to attend vessels upriver. Boring and risky when you come back home, tired and dangerously relaxed because your job was finished properly. Exactly 478 Km to go and another 478 to come back, leaving 04.00 and back at the office around midnight. :confused:
 

Markd77

Joined Sep 7, 2009
2,806
Lots of hackers in Russia.
This is from my website stats, all these sites are fake and exist for the sole purpose of tempting site owners to click on them, and they contain nasty scripts and viruses to try and get your FTP password to the web server.
 

Attachments

Markd77

Joined Sep 7, 2009
2,806
Just had a thought, #12 is 3rd alphabetically in the members list and the 1st currently active user, so an automated password hacking system might go for that first.
 

nsaspook

Joined Aug 27, 2009
16,363
Here's a picture of a message from my old ship to the guys that tried to jam and spoof some of our comm systems. :p

http://www.freerepublic.com/focus/news/1968752/replies?c=57

Russian 'hackers' have been around a long time trying to crack our codes and communication links. Most of the them today are just 'script kiddies' but the authors of these hack bots are very very good at using injection type hacks to gain information from users.
 
Last edited:

THE_RB

Joined Feb 11, 2008
5,438
I'm not sure about them being "Russian" hackers, I thought it was common for all hackers to use proxies in places like Russia?
 
Top