Key.Aero Network
Register Free

Page 1 of 2 12 LastLast
Results 1 to 30 of 51

Thread: ACCOUNT HACKING ATTEMPTS, MERGED THREAD

  1. #1
    Join Date
    Apr 2014
    Location
    vietnam
    Posts
    266

    ACCOUNT HACKING ATTEMPTS, MERGED THREAD

    yes i never thought this would happen, but thanks to the awesome team @ KP this did not go undetected..

    sir i know your ip, ur from brazil, your in either Sobral or Rio de genero, so please stop my friend. i wana live in peace ...

    IP Address Country Region City ISP
    201.9.26.235 Brazil Ceara Fortaleza Oi Velox/ Telemar Norte Leste S.a.

    Continent Latitude Longitude Organization
    South America -3.3167 -41.4167 Oi Velox/ Telemar Norte Leste S.a.

  2. #2
    Join Date
    Jul 2009
    Posts
    44
    Dear crow11, Yesterday the guy's at KP emailed me too, as someone from China was trying to access my account as well,again they provided me with their IP address 117.169.1.177.

  3. #3
    Join Date
    Apr 2014
    Location
    vietnam
    Posts
    266
    well there is nothing we can do to stop them from trying .. i just dont know why they try when you can just create a free account and contribute to the forums...
    Last edited by Peter; 20th March 2015 at 14:57.

  4. #4
    Join Date
    Jun 2008
    Location
    Valmiera, Latvia
    Posts
    656
    Probably because they want to do something bad disguised as a genuine user.

  5. #5
    Join Date
    Mar 2010
    Posts
    1,260
    Hi all, not been on the forum for about 4 years and got an Email from the admin. saying somebody has tried logging in my ID, 5 times and they have been blocked for 15 minutes.
    Just be aware folks. I don't put too much personal detail on the net if I can help it, it's just one method of how ID theft is done.
    And I changed password.
    Last edited by Peter; 20th March 2015 at 14:57.
    Higher than Gods, in Concorde or a Mozzy.

  6. #6
    Join Date
    Sep 2014
    Location
    Virgina, USA
    Posts
    58
    Just for member's awareness, I have been notified twice in the last few weeks of hacking attempts against my account. The first attempt was described simply as coming from Australia (?), while the second IP address specifically traced to a source in China. Clearly, discussions of military aviation and past military association may be of interest to various nefarious sources, so I suggest members may want to watch for more of this type of activity, and possibly change passwords as a precaution if concerned.

    Edit: Sorry, I just noticed that PeeDee reported a similar incident on his account several days ago. Obviously, someone is interested in the background of people on this site. It might be a good time for all to consider changing to a stronger password if appropriate.
    Last edited by Peter; 20th March 2015 at 14:58.

  7. #7
    Join Date
    Feb 2011
    Posts
    270
    You're right PD, a friend of ours has had attempts too, best to stick to the subjects in hand and keep any personal stuff that is potentially useful to them out of the way - after the way China ripped off a Merc 4x4 some years ago and got away with it in their 'courts' and then built their own YF-22 derivative (badly) from reputedly stolen plans, its clear that they have copying in their national psyche - the latest offended is Jaguar, who have seen their Evoque jeep ripped off @ around £20k less - shields up everyone.

  8. #8
    Join Date
    Jan 2000
    Location
    In holding pattern north of Duxford
    Posts
    3,394
    I doubt it has anything to do with the 'nature' of this site unless they are after making copies of WWII aircraft (not everyone frequents the Military Aviation forum)...

    It will be more likely an attempt to bypass the registration system and gain control of an account or accounts to use for spamming members by way of the PM system due to the anti-spam measures in place for new registrations...

    Seemples really...

    And this was first noted here -
    http://forum.keypublishing.com/showt...attempt-NOT-ME
    Under my gruff exterior lies an even gruffer interior...

    行雲流水

    Warbirdskies Blog

  9. #9
    Join Date
    Sep 2014
    Location
    Virgina, USA
    Posts
    58
    I agree with the reference to the site's direct contents, but some entities use these sites to find people who might be possible targets for additional investigation because of their background, and others simply to hack for commercial/criminal purposes. I get particularly suspicious of attempts from Chinese sources, as they have a very active information gathering network. I'm not paranoid, but anytime I see this activity, I tend to start changing passwords. Just a suggestion...
    Last edited by Peter; 20th March 2015 at 14:58.

  10. #10
    Join Date
    Jan 2000
    Location
    canada
    Posts
    12,416
    There have been the odd instance where folk's have received odd messages by private message etc.. when in doubt change your password and make sure it is a strong one.

  11. #11
    Join Date
    Jan 2000
    Location
    In holding pattern north of Duxford
    Posts
    3,394
    I've spent years fighting off Chinese spammers. And other regions too, to be fair. Of course you have a point about ensuring you use a robust password in the first place (hence the locked account emails Key send out - they failed to crack the passwords!) but they are using all sorts of IP proxies to thwart forum antispam software. I recently got a "locked account email" from a Mac forum I hadn't posted in since 2005. The IP address was for Dublin.

    One thing that seems to attract these 'account hacks' is a dormant account - some of the ones here have not been used in a while as reported by the account owners. This is attractive to the spammers as the password could be a weak one due to the early days of forums etc. Spamming from hijacked accounts was not a workaround then - they just bombarded forums with spam from new registrations due to the lack of any real anti-spam software.
    Under my gruff exterior lies an even gruffer interior...

    行雲流水

    Warbirdskies Blog

  12. #12
    Join Date
    Jan 2000
    Location
    canada
    Posts
    12,416
    Merged all three treads regarding account hacking attempts. Please keep all relevant discussion to this one.
    Peter,
    Mod

  13. #13
    Join Date
    Feb 2011
    Posts
    270
    Quote Originally Posted by crow11 View Post
    yes i never thought this would happen, but thanks to the awesome team @ KP this did not go undetected..

    sir i know your ip, ur from brazil, your in either Sobral or Rio de genero, so please stop my friend. i wana live in peace ...

    IP Address Country Region City ISP
    201.9.26.235 Brazil Ceara Fortaleza Oi Velox/ Telemar Norte Leste S.a.

    Continent Latitude Longitude Organization
    South America -3.3167 -41.4167 Oi Velox/ Telemar Norte Leste S.a.
    Hi,

    Can all the people getting hacking attempts please confirm if they are running Kaspersky anti-virus on their PC's plz?

  14. #14
    Join Date
    Oct 2010
    Posts
    2
    Apparently my account has had a hacking attack. I don't use Kaspersky, but Avast

  15. #15
    Join Date
    Mar 2014
    Posts
    1
    Hacking attempt ID'd by Key Publishing at 3.20am, 27 Apr 15 from IP: 202.114.144.15

    Not running Kapersky.

  16. #16
    Join Date
    Jan 2000
    Location
    In holding pattern north of Duxford
    Posts
    3,394
    The 'blend' of anti-virus software you are running makes no difference to these attempts to 'crack' your forum account. Neither does your choice of operating system - Mac owners will also be affected by attempts to access your forum account.

    While no attempt was made to access my KP account I did have a long dormant account on a Mac centric forum which suffered an access attempt. I run a Mac with minimal anti-virus software.

    The people/spambots behind these attempts to access forum accounts, have no interest in you - they merely want to bypass the registration system and anti spam measures in order to use the forums to post spam messages either openly in the forum, covertly by embedding URLs into seemingly innocuous posts* (often using the quotes option and bizarre replies) or by flooding the PM system with spam private messages.

    *They are often linkbots that try to build Google juice for their sites by spamming the Internet with hidden links; search engines look at raw HTML, so they pick these things up even when they don't appear in the rendered posts.

    As many forums have restrictions on the number of private messages new members send, or even restrictions on posting URLs, the easiest way is to take over an existing established (and often dormant) account. They can then spam to their hearts content, pretty safe in the knowledge, that the owner of the account will not be alerted until they get a stern email from the forum owners about "their" activity.

    Best way to stop them is to ensure that you have a robust password for your account - many people tend to use a simple password for their forum accounts because often it is/was deemed to be 'low risk', in that very little personal info is held in your profile. They may harvest your email for spamming but their target is actually the wider audience of the forum membership...
    Last edited by Bob; 27th April 2015 at 09:17.
    Under my gruff exterior lies an even gruffer interior...

    行雲流水

    Warbirdskies Blog

  17. #17
    Join Date
    Mar 2010
    Posts
    1
    Hacking attempt ID'd by Key Publishing at 12.59, 01 May 15 from IP: 178.16.208.57

    I don't use Kaspersky, but Avast.

  18. #18
    Join Date
    Sep 2013
    Location
    Carpendeit, Victoria, Australia
    Posts
    156
    I received an email from key this morning after an attempt on my account

    The person trying to log into your account had the following IP address: 185.14.29.221
    Cheers, Dan
    "If there is no struggle, there is no progress."

    http://dh104preservation.webs.com/
    https://www.facebook.com/DovePreservationGroup

  19. #19
    Join Date
    Jun 2010
    Location
    Bomber Country. Lincolnshire
    Posts
    8,401
    Received a message from K.P. this morning, my account was hacked 5 times, then Key locked down for 15 mins.
    I.P. address was...50-7-159-178..
    Any of you guys able to tell where this pillock is from?.
    Jim.
    Lincoln .7
    There is no such thing as a problem, just a solution!!

  20. #20
    Join Date
    Apr 2005
    Location
    Black Forest, Germany.
    Posts
    8,621
    Sorry to say that 'pillock' would appear to be from Frankfurt, Germany. (Don't blame me!).
    http://www.flightmemory.com/ I have been round the world 11.6 times!

  21. #21
    Join Date
    Jun 2010
    Location
    Bomber Country. Lincolnshire
    Posts
    8,401
    Thanks Newforest, just can't understand the mentality of these idiots. Good job Key keeps an eye out for us on here.
    Jim.
    Lincoln .7
    There is no such thing as a problem, just a solution!!

  22. #22
    Join Date
    Mar 2011
    Location
    South Gloucestershire
    Posts
    2,907
    Had a crack at mine last night 78.46.51.124
    I have kleptomania,But when it gets bad
    I take something for it.

  23. #23
    Join Date
    May 2004
    Location
    North Vancouver (beautiful british columbia) Canada... Tiz a long way frum Devon
    Posts
    891

    attempts by someone ? to access my flypast account

    Hi All,
    I got an e mail,
    5 attempts were made to try to log into my flypast account
    No me !
    anyone else getting strange attempts to access their account ?
    cheers
    jerry

  24. #24
    Join Date
    Jan 2000
    Location
    Black Six
    Posts
    20,181
    Have you tried looking at the top post in the forum?

    Moggy
    Moderator

  25. #25
    Join Date
    Apr 2005
    Location
    Black Forest, Germany.
    Posts
    8,621
    That would appear to be a 'pillock' , to quote Jim, from Nuremberg, Germany.
    http://www.flightmemory.com/ I have been round the world 11.6 times!

  26. #26
    Join Date
    Jan 2000
    Location
    Black Six
    Posts
    20,181
    Spam-O-Matic Statistics
    768,853 Spammers Denied Registration
    Moggy

  27. #27
    Join Date
    Mar 2009
    Location
    Near Yeovilton, Somerset
    Posts
    263
    The 'pillock' that tried hacking my account in June was from France it seems.

  28. #28
    Join Date
    Feb 2006
    Location
    Fast and low over Duxford
    Posts
    1,379

    Log-in attempts to my account

    A few weeks ago I had five log-in attempts to my account. The person (machine) involved was blocked from attempting further, and I got an e-mail as a warning.
    I changed my password due to this. I tracked the IP to the States on this occation.

    Today, I got another e-mail about five attempted log-ins. This IP could not be traced as it was via a Proxy server.

    Anyone else get these log-in attempts?

  29. #29
    Join Date
    Apr 2005
    Location
    Black Forest, Germany.
    Posts
    8,621
    http://www.flightmemory.com/ I have been round the world 11.6 times!

  30. #30
    Join Date
    Feb 2006
    Location
    Fast and low over Duxford
    Posts
    1,379
    Quote Originally Posted by Newforest View Post
    Sparse!

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

- Part of the    Network -

KEY AERO AVIATION NEWS

MAGAZINES

AVIATION FORUM

SHOP

 

WEBSITES