English Amiga Board


Go Back   English Amiga Board > abime.net - Home Projects > project.EAB

 
 
Thread Tools
Old 18 September 2013, 16:08   #1
Actyon
Registered User
 
Join Date: Feb 2013
Location: Madrid, Spain
Posts: 16
Password attack on the board

I don't know if it's the right place to write this. I searched in the FAQs and the board and there is no specific place where we can report problems with the site.

Anyway I want to report that I received the following notification e-mail:
Quote:
Dear Actyon,

Someone has tried to log into your account on English Amiga Board with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: xxxxxxxxxxx

All the best,
English Amiga Board
I havent visited the board for quite some time, and it certainly was not me who tried to log in yesterday.

If the administrators need the IP I will give it to them
Actyon is offline  
Old 18 September 2013, 19:02   #2
alenppc
Registered User
 
Join Date: Apr 2012
Location: Canada
Age: 40
Posts: 836
I had the same, it was a Russian IP.
alenppc is offline  
Old 18 September 2013, 21:10   #3
DH
Global Moderator

DH's Avatar
 
Join Date: Sep 2008
Location: Geordie Land
Age: 53
Posts: 4,089
Yes, we are aware of the problem of these attacks, however, once they have tried 5 failed times to access your account the IP is automatically blocked from logging in again.

RCK is in process of changing some board options to hopefully prevent this from happening

We are working to prevent this, but if anyone else has had the same issue, please post here

Oh, also giving the IP address of the attacker can also be helpful too, if you prefer to to keep private then PM one of the GM's instead

EDIT: Also moved to the appropriate forum

Also, my advice to anyone who is unsure of how secure their password is, should change it immediately making it a minimum of 8 characters containing a mixture of usable characters, some capitalised, and at least 1 number.

Last edited by DH; 18 September 2013 at 21:53.
DH is offline  
Old 19 September 2013, 00:35   #4
Akira
Black Lives Matter

Akira's Avatar
 
Join Date: May 2001
Location: New York
Posts: 19,384
Me too, russian IP.
Akira is offline  
Old 19 September 2013, 01:28   #5
DH
Global Moderator

DH's Avatar
 
Join Date: Sep 2008
Location: Geordie Land
Age: 53
Posts: 4,089
So, it appears they are attempting to Hack in alphabetical order of sorts, as your usernames all start with the letter 'A'

Oh! And thanks Akira, it was your contact that made us aware of what was going on
DH is offline  
Old 19 September 2013, 03:11   #6
Adrian Browne
Jackie Chan
 
Join Date: Mar 2012
Location: Ireland
Age: 43
Posts: 733
yup russian ip, st petersburg. I changed my password.
Adrian Browne is offline  
Old 19 September 2013, 04:08   #7
8bit
 
Posts: n/a
Failed Login Notification on English Amiga Board

I have got this email 2 times in the last 2 days.

Do I need to be nervous

The person is trying to login from the same IP address.


/8bit
----------------START---------------
19 September 2013 05:10

Dear 8bit,

Someone has tried to log into your account on English Amiga Board with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 188.143.234.6

-----------------END----------------
 
Old 19 September 2013, 05:39   #8
jmmijo
Junior Member
jmmijo's Avatar
 
Join Date: Jan 2002
Location: PDX
Age: 58
Posts: 2,379
Quote:
Originally Posted by 8bit View Post
I have got this email 2 times in the last 2 days.

Do I need to be nervous

The person is trying to login from the same IP address.


/8bit
----------------START---------------
19 September 2013 05:10

Dear 8bit,

Someone has tried to log into your account on English Amiga Board with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 188.143.234.6

-----------------END----------------

Apparently there has been some attempts from a Russian IP block that has been causing this to occur, I read this in another thread somebody posted.
jmmijo is offline  
Old 19 September 2013, 09:06   #9
lilalurl
Global Moderator
lilalurl's Avatar
 
Join Date: Aug 2001
Location: France
Age: 41
Posts: 3,254
Send a message via ICQ to lilalurl
There:
http://eab.abime.net/project-eab/708...ack-board.html
lilalurl is offline  
Old 19 September 2013, 10:37   #10
Allen1
Registered User
 
Join Date: Nov 2009
Location: Blyth England
Age: 64
Posts: 786
Same here, here is the address that my attacker used. If this is not within the site rules please delete the link and good luck with keeping individuals like this one who is playing games away
Allen1 is offline  
Old 19 September 2013, 12:22   #11
zipper
Registered User
 
Join Date: Mar 2004
Location: finland
Posts: 1,624
% Abuse contact for '188.143.232.0 - 188.143.232.255' is 'abuse@pinspb.ru'
zipper is offline  
Old 19 September 2013, 13:58   #12
FOL
PSPUAE DEV

FOL's Avatar
 
Join Date: Nov 2006
Location: Barry / UK
Age: 42
Posts: 5,782
Send a message via MSN to FOL
Quote:
Originally Posted by zipper View Post
% Abuse contact for '188.143.232.0 - 188.143.232.255' is 'abuse@pinspb.ru'
Its just there for show. The report emails do nothing.
I get people from all over the world trying to hack my home server. Used abuse emails, but they do nothing. Thankfully, I haven't been hacked once in 5 years.

I do get regular emails from apple, saying I have requested a new password.
Apple didn't care, I was told to stop requesting new passwords. They seemed quite stupid.
FOL is offline  
Old 19 September 2013, 15:03   #13
DH
Global Moderator

DH's Avatar
 
Join Date: Sep 2008
Location: Geordie Land
Age: 53
Posts: 4,089
Threads have been merged from OT-General and have been placed above newer posts.

Post additions in the thread are from 8bit post #7, jmmijo post #8 & lilalurl post #9, if you would like to view them.
DH is offline  
Old 19 September 2013, 19:46   #14
adrianh78
Registered User
 
Join Date: Nov 2012
Location: Northampton
Posts: 25
I am getting the same

Same IP address on both the attacks my account has received:-

188.143.234.14

Last edited by adrianh78; 19 September 2013 at 19:53.
adrianh78 is offline  
Old 19 September 2013, 19:53   #15
adrianh78
Registered User
 
Join Date: Nov 2012
Location: Northampton
Posts: 25
Not to worry - sorted my password now
adrianh78 is offline  
Old 19 September 2013, 20:38   #16
DH
Global Moderator

DH's Avatar
 
Join Date: Sep 2008
Location: Geordie Land
Age: 53
Posts: 4,089
RCK has blacklisted some of the IP ranges, so hopefully now, we won't be getting this insane password hacking attempts from .ru

But please, if you are still being bothered by any new attempts/attacks, with different IP's from .ru, please post them here.

EDIT: Although we can't blacklist every single range, it's really impossible, I have double checked for IP's covering the ranges that have been or will be blacklisted, and they don't effect anybody within EAB. Also, these IP's are reported as having no host, which in all honesty, I doubt any regular users from St. Petersburg will be effected.

Last edited by DH; 19 September 2013 at 22:18.
DH is offline  
Old 19 September 2013, 23:00   #17
FOL
PSPUAE DEV

FOL's Avatar
 
Join Date: Nov 2006
Location: Barry / UK
Age: 42
Posts: 5,782
Send a message via MSN to FOL
Quote:
Originally Posted by DH View Post
RCK has blacklisted some of the IP ranges, so hopefully now, we won't be getting this insane password hacking attempts from .ru

But please, if you are still being bothered by any new attempts/attacks, with different IP's from .ru, please post them here.

EDIT: Although we can't blacklist every single range, it's really impossible, I have double checked for IP's covering the ranges that have been or will be blacklisted, and they don't effect anybody within EAB. Also, these IP's are reported as having no host, which in all honesty, I doubt any regular users from St. Petersburg will be effected.

The only problem with black listing, is if there is a proper user on a ip sharing isp. Then they get blocked too, .
FOL is offline  
Old 19 September 2013, 23:14   #18
Marcuz
Wurk???
Marcuz's Avatar
 
Join Date: Jun 2002
Location: .
Age: 44
Posts: 5,267
As a curiosity, what's the purpose of such attacks? I mean, if after 5 attempts the user is notified and the IP blocked to further retry for an amount of time, the method seems unpractical.
So what happens? The hacker pass to the next name on the list using a list of passwords o the same five password ever and ever until one fits? The probabilities look very few that he would ever get a positive...
And if he does, what, he has simply access to the EAB account of a member?
Marcuz is offline  
Old 19 September 2013, 23:24   #19
prowler
Global Moderator

prowler's Avatar
 
Join Date: Aug 2008
Location: Sidcup, England
Posts: 10,300
Quote:
Originally Posted by Marcuz View Post
And if he does, what, he has simply access to the EAB account of a member?
And with that comes access to the user's Control Panel, and thus email address, which they can try to hack into next with knowledge of their EAB password (possibly matching their email account password if the user is careless).

Emails can give clues about name and address, bank and credit card account details, other passwords, etc...
prowler is offline  
Old 20 September 2013, 00:01   #20
FOL
PSPUAE DEV

FOL's Avatar
 
Join Date: Nov 2006
Location: Barry / UK
Age: 42
Posts: 5,782
Send a message via MSN to FOL
Its also very hard to stop it, as they could use proxy's.
Had this happen a few times on my site after blocking their ip's.
FOL is offline  
 


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Similar Threads
Thread Thread Starter Forum Replies Last Post
seed of darkness password mike4466 support.Games 2 30 June 2011 13:29
Boing Bag 2 password? GreenMeanie support.Apps 37 02 April 2008 05:10
Money Matters 4 Password? Mag1c1an support.Apps 0 29 June 2006 19:54
Forgot password :o( Pete support.Apps 3 30 December 2004 22:20
Password protection in Breathless? Tim Janssen support.Games 3 31 May 2002 10:30

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 16:39.


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2020, vBulletin Solutions Inc.
Page generated in 0.18902 seconds with 15 queries