NIWA Community Forums

NIWA Community => NIWA Discussion => Topic started by: Blake on February 12, 2011, 02:12:53 PM

Title: Someone trying to log in my account but failing?
Post by: Blake on February 12, 2011, 02:12:53 PM
I have gotten like 5 email in the past 24 hours saying somebody has failed at logging in my account.
Should I be concerned? Can I PM an admin or MOD with the IP adress it gave me so you can see who it is?

Although I admit I have tried to log into many "Blake"s on forums when I didn't own the name, but wanted to see if I did.

Lastly, forums that have 8character password laws are annoying. >.>
I was putting in my usual password, and it wasn't working, so I actually thought the user hacked me.
Then I figured out it was 8 characters.
Title: Re: Someone trying to log in my account but failing?
Post by: Maxite on February 12, 2011, 03:18:17 PM
Yea, I've been having the same problem as well with people trying to log in.
Title: Re: Someone trying to log in my account but failing?
Post by: Moydow on February 12, 2011, 03:43:28 PM
Several people have had this problem. I've had four in the last 18 hours. It's most likely coming from a proxy, so the IP addresses probably won't help much. One IP is apparently located in the Netherlands, but others have been located in places such as Texas.
Title: Re: Someone trying to log in my account but failing?
Post by: Justin on February 12, 2011, 05:18:18 PM
There are several solutions as to what's going on, here. Numerous staff have reported receiving the email. I received it myself. At first, we thought it was someone trying to get into our accounts, but this is interesting to discover that even regular users are getting it. Anyone else who received it, please say so. It would be nice to get an idea of how many people got it.
Title: Re: Someone trying to log in my account but failing?
Post by: BooDestroyer on February 12, 2011, 05:28:50 PM
I got it too.

I don't even get it either.
Title: Re: Someone trying to log in my account but failing?
Post by: blazevoir on February 12, 2011, 05:43:01 PM
Yeah, I've been getting them too. I got about 4 in the past 24 hours.
Title: Re: Someone trying to log in my account but failing?
Post by: Tina on February 12, 2011, 05:47:16 PM
I got one, but only one. Happened yesterday.
Title: Re: Someone trying to log in my account but failing?
Post by: Volatile Dweevil on February 12, 2011, 06:52:01 PM
I got one too.
Title: Re: Someone trying to log in my account but failing?
Post by: Miles of SmashWiki on February 12, 2011, 07:16:04 PM
I haven't gotten any. ?_?
Title: Re: Someone trying to log in my account but failing?
Post by: dkpat on February 12, 2011, 07:53:40 PM
None for me!
Title: Re: Someone trying to log in my account but failing?
Post by: Greenpickle on February 12, 2011, 07:59:23 PM
Quote from: Blake on February 12, 2011, 02:12:53 PM
Lastly, forums that have 8character password laws are annoying. >.>
I was putting in my usual password, and it wasn't working, so I actually thought the user hacked me.
Then I figured out it was 8 characters.

Wait, what 'laws'?

(No, nothing here.)
Title: Re: Someone trying to log in my account but failing?
Post by: TurtwigA on February 12, 2011, 09:22:26 PM
They mean it has to be at least 8 characters. I agree, I had to change my usual password just to fit the criteria, and I don't want to have to do that.


No one has tried to get into my account though, but for some reason, I keep getting random IMs and emails from ad companies and random apparent internet stalkers telling me to talk to somebody. And the only two places I've stated my email is here at NIWA, and over on BMG where it is guarded against spam.
Title: Re: Someone trying to log in my account but failing?
Post by: Greenpickle on February 12, 2011, 09:32:31 PM
Hmm, well, if you're using passwords less than 8 characters long, it's probably a good idea to come up with a new password anyway - and I'm sure you don't need to be told that having a 'usual' password isn't good, anyway.
Title: Re: Someone trying to log in my account but failing?
Post by: pikachu8090 on February 13, 2011, 12:01:00 AM
I got two today and two yesterday with at least a 8 hour time span between each

what is going on?
Title: Re: Someone trying to log in my account but failing?
Post by: Mari-Illustrious-Makinami on February 13, 2011, 01:07:58 AM
Everybody got an email from Xizor telling users to change their password?
Title: Re: Someone trying to log in my account but failing?
Post by: Xizor on February 13, 2011, 01:09:12 AM
Yeah I just sent that. It's advisable because we're not sure what's doing this, so you might as well be safe about your account here.

I, personally, have gotten 4 emails about a failed login attempt.
Title: Re: Someone trying to log in my account but failing?
Post by: Mari-Illustrious-Makinami on February 13, 2011, 01:13:51 AM
I personally have gotten none.

(Although, I have like 400 emails, so it might be lost in there...)
Title: Re: Someone trying to log in my account but failing?
Post by: Axiomist on February 13, 2011, 01:19:46 AM
Let us know the IP of the jerk and we'll ban. I've got like five or six different IPs so far, and I'm sure the same IP is trying on multiple accounts so the faster we ban one, the fewer people that get hit.

137.56.163.64
95.143.193.145
192.251.226.206
77.109.139.87
46.4.237.146
Thus far from my emails.
Title: Re: Someone trying to log in my account but failing?
Post by: Alex on February 13, 2011, 02:06:24 AM
I've had 6 attempts. 4 from the UK, 2 from China.
Title: Re: Someone trying to log in my account but failing?
Post by: Ahmlink on February 13, 2011, 02:36:54 AM
Ya I got 4 notifications! Different IPs from Germany...
Title: Re: Someone trying to log in my account but failing?
Post by: 5thgenerator on February 13, 2011, 03:22:54 AM
Yea. I've gotten 8-10 in the past day. ???
Title: Re: Someone trying to log in my account but failing?
Post by: Seritinajii on February 13, 2011, 03:32:54 AM
Exactly zero. I wonder why.

There has also been a lot of vandalism and spam account on the wikis, such as the FE Wiki, has anyone else noticed?
Title: Re: Someone trying to log in my account but failing?
Post by: tacopill on February 13, 2011, 05:44:58 AM
Alot of wiki's have been getting hit by spam.

To help counter it, per request and help of other people around said wiki's, I've installed Title Blacklist (http://www.mediawiki.org/wiki/Extension:Title_Blacklist) and Spam Blacklist (http://www.mediawiki.org/wiki/Extension:SpamBlacklist) to Fire Emblem Wiki, Lylat Wiki and WikiBound; And then MetroidKing has helpouted in defining the respective MediaWiki pages (MediaWiki:Spam-blacklist and MediaWiki:Titleblacklist). (Thank you, StrategyWiki and ZeldaWiki).

This has helped cut down on the spam, and any new spammers have been added to the blacklists over time.


Anyway. This seems to be more different, but it maybe linked. as far as i can tell, It/he/she is Attacking specifically the forums; so make sure you have changed your password and do so routinely.

The IP addresses of the one's i got so far are:
66.96.16.32 (http://whatismyipaddress.com/ip/66.96.16.32)
87.118.104.203 (http://whatismyipaddress.com/ip/87.118.104.203)
95.143.193.145 (http://whatismyipaddress.com/ip/95.143.193.145)
66.249.9.107 (http://whatismyipaddress.com/ip/66.249.9.107)

Hope it helps.
Title: Re: Someone trying to log in my account but failing?
Post by: pikachu8090 on February 13, 2011, 02:26:22 PM
My ip addresses of the ones i got:

76.74.56.7 (http://whatismyipaddress.com/ip/76.73.56.7) in the US (3 of them)

62.141.53.224 (http://whatismyipaddress.com/ip/62.141.53.224) in Geramny

79.120.86.20 (http://whatismyipaddress.com/ip/79.120.86.20) Russia

216.86.62.205 (http://whatismyipaddress.com/ip/216.86.61.205) in US
Title: Re: Someone trying to log in my account but failing?
Post by: Level 3 on February 13, 2011, 06:05:15 PM
None so far, but changed my password regardless.
Title: Re: Someone trying to log in my account but failing?
Post by: tacopill on February 13, 2011, 06:14:32 PM
Quote from: Level 3 on February 13, 2011, 06:05:15 PM
None so far, but changed my password regardless.

good for you, so far.  ;D
Title: Re: Someone trying to log in my account but failing?
Post by: pikachu8090 on February 13, 2011, 09:23:27 PM
I just got one two hours ago with the ip address of 81.218.219.122 (http://whatismyipaddress.com/ip/81.218.219.122) It was in Israel
Title: Re: Someone trying to log in my account but failing?
Post by: Aria der Donau on February 14, 2011, 02:04:33 AM
So far, seven failed attempts, which is amusing and annoying...

http://whatismyipaddress.com/ip/87.118.104.203 (http://whatismyipaddress.com/ip/87.118.104.203)
http://whatismyipaddress.com/ip/83.142.228.14 (http://whatismyipaddress.com/ip/83.142.228.14)
http://whatismyipaddress.com/ip/74.208.246.213 (http://whatismyipaddress.com/ip/74.208.246.213)
http://whatismyipaddress.com/ip/91.121.170.32 (http://whatismyipaddress.com/ip/91.121.170.32)
http://whatismyipaddress.com/ip/208.110.65.123 (http://whatismyipaddress.com/ip/208.110.65.123)
http://whatismyipaddress.com/ip/109.123.119.163 (http://whatismyipaddress.com/ip/109.123.119.163)
http://whatismyipaddress.com/ip/87.236.199.73 (http://whatismyipaddress.com/ip/87.236.199.73) (Even Czech Republic? Wow, that popular?)
Title: Re: Someone trying to log in my account but failing?
Post by: Maxite on February 14, 2011, 05:41:24 PM
This is vaguely starting to remind me of a time many years ago when an online group I was in got into a quarrel with another group and they started trying to "hack" each others members.
Thing is, I wonder who is trying to attack us, and why?
Title: Re: Someone trying to log in my account but failing?
Post by: BooDestroyer on February 14, 2011, 07:34:44 PM
Geez, I'm STILL getting them!

Maybe the staff here can just kill my account off. I'm no longer interested in posting here as much anyway.
Title: Re: Someone trying to log in my account but failing?
Post by: pikachu8090 on February 14, 2011, 09:30:21 PM
i just got two more with the ip address of 95.143.193.145 (http://whatismyipaddress.com/ip/95.143.193.145)
It in Sweden

74.120.15.150 (http://whatismyipaddress.com/ip/74.120.15.150) in Seattle Washington Us

Title: Re: Someone trying to log in my account but failing?
Post by: Xizor on February 14, 2011, 10:05:02 PM
We're gonna mod the forums and it will reduce this issue.
Title: Re: Someone trying to log in my account but failing?
Post by: Level 3 on February 15, 2011, 02:02:39 AM
Guys, it's obviously Wikia. They hired some internet hitmen on 4chan who obviously turned out to be failures.

Anyway, nothing here on my end... yet. Hopefully this will die down once they realize they have failed.
Title: Re: Someone trying to log in my account but failing?
Post by: Ahmlink on February 15, 2011, 03:42:35 AM
It`s obviously a running script that is doing this; the fact is I`ve gotten almost 8 notifications, including two that were my own IP address... (This happened while I was logged in)!!!
Title: Re: Someone trying to log in my account but failing?
Post by: Justin on February 16, 2011, 07:08:03 PM
Forward me that email, please? (The one with your IP logging in)
Title: Re: Someone trying to log in my account but failing?
Post by: Blake on February 20, 2011, 02:25:55 PM
(http://i53.tinypic.com/2ufrpxk.jpg)
...............
Title: Re: Someone trying to log in my account but failing?
Post by: Amoebas on February 20, 2011, 02:56:22 PM
I've gotten 3 of these emails a day since 02/11/2011.
Hello Amoebas,
We have detected a failed login attempt on your account.



IP address of the failed login attempt: 137.56.163.64

IP changes everytime

30 emails is ENOUGH - somebody delete my account.
Title: Re: Someone trying to log in my account but failing?
Post by: dkpat on February 20, 2011, 04:30:02 PM
Trust me, the staff is concerned about this and we are trying to script up a solution. Hopefully we will have it fixed very soon.
Title: Re: Someone trying to log in my account but failing?
Post by: Peanut64 on February 20, 2011, 04:30:59 PM
No one has evar tried to log my acc. Strange.
Title: Re: Someone trying to log in my account but failing?
Post by: tacopill on February 21, 2011, 12:50:56 AM
In the last 8 days, i have been attacked from the following 8 IP's.

93.167.245.178
193.138.216.157
192.251.226.205
85.235.31.248
178.79.138.128
173.13.165.123
199.48.147.38
137.56.163.46
173.193.221.28
74.120.12.135
199.48.147.45
91.121.152.114
199.48.147.36
199.48.147.40
137.56.163.46
199.48.147.41
87.236.199.73
83.87.66.24
74.120.12.135
192.251.226.206
199.48.147.36
173.193.221.28
192.251.226.205
91.121.152.114
46.28.108.24
83.142.228.14
Title: Re: Someone trying to log in my account but failing?
Post by: Member#36 on February 21, 2011, 03:07:09 AM
I don't know if anyone has tried to get into my account, but then again, I never connected my email with the NIWA forums. 

As long as you keep a secure password, then the hacker(s) won't be able to succeed unless he/she/they do some sort of mega server hack or something, which can only be accessed by a select few.  Considering the hacker(s) are trying multiple logins, with repeated fails, it can be more or less safe to say that a secure password is all that is required for the member-in-question.

The staff is going further, however, working to solve the issue.  So, you should be getting less emails like this soon enough.
Title: Re: Someone trying to log in my account but failing?
Post by: tacopill on February 21, 2011, 03:26:12 AM
ok. good to know.
Title: Re: Someone trying to log in my account but failing?
Post by: pikachu8090 on February 22, 2011, 04:14:15 AM
i got two each day the since (it is irritating what is happening)

157.88.36.111
137.56.163.46
199.48.147.40
71.231.64.162
109.123.119.163
74.120.15.150
70.89.123.125
208.66.135.190
217.20.114.254
173.193.221.28
83.87.66.24
46.19.138.242
199.48.147.45
64.27.17.140

Title: Re: Someone trying to log in my account but failing?
Post by: Naesala on February 22, 2011, 04:32:25 AM
Why haven't I been targeted?
Title: Re: Someone trying to log in my account but failing?
Post by: dkpat on February 22, 2011, 04:57:17 AM
Quote from: Mr._L on February 22, 2011, 04:32:25 AM
Why haven't I been targeted?
That's anybodies guess. I would like to note, that I also have not been targeted, and.. This isn't just a problem here, other forums have been having the problem as well. 
Title: Re: Someone trying to log in my account but failing?
Post by: Member#36 on February 22, 2011, 06:50:04 PM
A patch was installed, which should prevent future login attempts from bots and/or hackers.  If you continue to get these emails from this point on, please say so.  Otherwise, the issue is more of less solved.  Thanks Adam for the installation, Moydow for the patch, and whoever else!
Title: Re: Someone trying to log in my account but failing?
Post by: Maxite on March 10, 2011, 07:22:11 AM
Where can one grab a copy of this patch?
Title: Re: Someone trying to log in my account but failing?
Post by: Moydow on March 10, 2011, 08:00:25 AM
www.simplemachines.org/community/index.php?topic=416928.msg2960115#msg2960115#msg2960115
Title: Re: Someone trying to log in my account but failing?
Post by: tacopill on June 06, 2011, 07:52:13 PM
was cleaning out my email box, and found these IP adresses i never added to the list.