Jump to content

Spurious password change request emails


Recommended Posts

ya I got a notice also, traced the IP, comes from southern area of china, its seems like a dictionary attack, the forum locks them out after 5 tries, as long as your not dumb and don't use basic passwords you should be fine, always use upper lower and numbers, its not fool proof but Dictory attacks don't work with DCS so you should be safe, plus they forum accounts are not the same as license accounts so even if they got it your account info is isolated.

Call Sign -Winter-

"The North Never Forgets"

Link to post
Share on other sites
  • 3 weeks later...
  • Replies 153
  • Created
  • Last Reply

Top Posters In This Topic

Ban this person please

 

Hi ED,

 

I received this email from you not long ago:

 

Dear

 

Someone has tried to log into your account on ED Forums with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

 

The person trying to log into your account had the following IP address: 111.207.203.195

 

All the best,

ED Forums

 

This was not me trying to log in. Can you please ban this IP.

 

IP Tracker shows:

 

IP Locator & IP Lookup Basic Tracking Info

IP Address: 111.207.203.195

Reverse DNS: ** server can't find 195.203.207.111.in-addr.arpa: SERVFAIL

Hostname: 111.207.203.195

IP Blacklist Check: Suspicious, Comment Spammer

Level: 23

Activity: 2 days ago

[ Blacklist Check]

IP Lookup Location For IP Address: 111.207.203.195

Continent: Asia (AS)

Country: China (CN)

Capital: Beijing

State: Beijing

City Location: Beijing

ISP: China Unicom Beijing

Organization: China Unicom Beijing

AS Number: AS4808 CNCGROUP IP network China169 Beijing Province Network

 

IP Weather Station: Beijing

Sky: few clouds

Temp: 24.4 ºC (max 24.4 ºC / min 24.4 ºC)

Wind Speed: 1.7 m/s

Wind Direction: 137.5°

Humidity: 53%

Cloudiness: 20%

Atmospheric pressure: 993.7 kPa

Time Zone: Asia/Shanghai

Local Time: 10:53:50

Timezone GMT offset: 28800

Sunrise / Sunset: 05:19 / 19:04

 

At least we know the weather conditions there so after virtually bombing him we can RTB and land. Don't even require an instrument approach...

 

Regards,

 

Low Blow


Edited by Low Blow

[sIGPIC][/sIGPIC]

Twitch:

 

My Specs:



 

i7 8700K, 32gig Corsair DDR4 3000Mhz, 2080ti, Obutto R3volution, VKB Gunfighter Mk.III MCG Pro EN, Warthog Throttle, Saitek Combat Pedals, Oculus Rift S

 

 

MMSOBGYTAST!

Link to post
Share on other sites
  • 1 month later...

Possible hack

 

My dads credit card was hacked from person(s) unknown strangely I had just used to to buy a WW2 aircraft from this site I know for a fact this site is fine and nothing to do with it they tried to take £500 worth of clothes from NEXT.

 

The credit company was on its toes and stopped it but now I cant login to eagle.ru to check my modules to see if they have been stolen aswell my steam seems ok. I Cant change password just go around and around never allowing me tho saying its changed.

 

Can't wait for help guys already good to rebuy an X52 Pro, TrackiR 5

 

 

Thanks for your time.

:joystick: YouTube :pilotfly:

TimeKilla on Flight Sims over at YouTube.

Link to post
Share on other sites

How can CC hackers access your accounts on ED sites? That's not make sense.

 

There must be anothoer issue with it...

i7-2600 @3.4GHz | Corsair 16GB @1600MHz. | MSI GTX1660Ti Gaming X | Samsung 256GB SSD (Win7HPx64)

Samsung 32" | Saitek X-55 Rhino & Rudder | Trustmaster MFD Cougars & 2 x 8"TFTs | Logitech G13, G230, G510, PZ55 SwitchPanel & Farming Sim Panel | TIR5

>>MY MODS<< | Discord: Devrim#1068

Mi-24P Hind EN Cockpit WIP: %99,9

Link to post
Share on other sites

sounds like a keylogger is on your machine. i wouldnt use that machine to log into anything until you are sure its clean

""This was not in the Manual I did not read", cried the Noob" - BMBM, WWIIOL

Link to post
Share on other sites

Check your PC for sure. Grab Malware Bytes, run a scan.

 

*off topic, Seems DCS site doesnt use https login etc, by default. https is enabled; but http:// doesn't default to https://

Current Flight Rig

 

i7 4960X @ 4.6Ghz

ASUS Rampage IV Formula

G.SKILL TridentX 2400Mhz 32GB DDR3

Crucial 1TB MX300 SSD

MSI Gaming X 1080Ti

Samsung 55" JS8000 SUHD 4K

Windows 10 x64

TrackIR 5, Warthog HOTAS

Saitek Pro Flight Combat Pedals

Custom Akers-Barnes, MkI eyeball.

 

Link to post
Share on other sites
  • 1 month later...

HACKING ATTACKS

 

I got an email someone (not me) tried to log on with my username from a foreign IP address last night. I searched the forums and I am seeing several others complain of this in the past few days.

 

What's going on?

i5-2500K @4.2 GHz | 16GB RAM | GTX460s in SLI | 1TB HDD (internal) | 1TB HDD (external via eSATA) for FRAPS recording | Thrustmaster Warthog HOTAS | Saitek Pro Flight Combat Rudder Pedals | TrackIR5 | 50" LG monitor

Link to post
Share on other sites

I got it aswell.

 

IP Adress: 89.105.194.72

Location Doetichem, the Netherlands

 

But it is probably a proxy IP adress

 

Edit: I am sure it is a proxy. Host is TOR network.


Edited by fixen
Link to post
Share on other sites

confirmed.... someone was knocking on my digital door :(

 

:::::::::::

Dear BitMaster,

 

Someone has tried to log into your account on ED Forums with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

 

The person trying to log into your account had the following IP address: 185.14.29.221

:::::::::::

 

 

We better all check and redo the pwd's once again, aint the 1st time this year I had to redo most of them.

Asus Z370-E - 8700K@5G_delidded - 32GB - 1080GTX-Ti EK-waterblock - 1x 960Evo 250GB - 3x Samsung 850/860Pro 256GB Raid-0 - 1x Samsung 870 Evo 1TB - 2x Seagate 2TB - 32GB PageFile - Heatkiller IV - MoRa3-360LT@4x180mm fans - Corsair AXi-1200 - TiR5-Pro - Warthog Hotas - Saitek Combat Pedals - Asus PG278Q 27" QHD Gsync 144Hz - Win10Pro64 

Link to post
Share on other sites

Forum Hacking Threat: 2-Factor Auth needed

 

Hi Forum,

 

I post this in World Forum, the admins may move it, as I think it is of general interest.

 

 

Looking at my Inbox and the recent hacking attack makes me wanna have 2-Factor-Auth for

 

ED and Forum if possible.

 

 

Google Auth was fine, what do you think ?

 

 

...........here's what i had in my mail tonight, and knowing this user/pwd also protects all of my ED lics makes me a bit nervous.... ::

 

_________________________________________________________________________

Dear BitMaster,

 

Someone has tried to log into your account on ED Forums with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

 

The person trying to log into your account had the following IP address: 185.14.29.221

 

__________________________________________________________________________

 

 

...I was not the only one as you can see from other posts of today, something is going on !!!

 

 

 

Bit

Asus Z370-E - 8700K@5G_delidded - 32GB - 1080GTX-Ti EK-waterblock - 1x 960Evo 250GB - 3x Samsung 850/860Pro 256GB Raid-0 - 1x Samsung 870 Evo 1TB - 2x Seagate 2TB - 32GB PageFile - Heatkiller IV - MoRa3-360LT@4x180mm fans - Corsair AXi-1200 - TiR5-Pro - Warthog Hotas - Saitek Combat Pedals - Asus PG278Q 27" QHD Gsync 144Hz - Win10Pro64 

Link to post
Share on other sites

I'm not sure what you are worried about? They got your password wrong and ED blocked them, how does that make your account less safe?

PC:

 

6600K @ 4.5 GHz, 12GB RAM, GTX 970, 32" 2K monitor.

 

Link to post
Share on other sites

And I thought I was concerned that https is not used by default when you login to the forums, or your DCS profile account...

 

:cry:

Current Flight Rig

 

i7 4960X @ 4.6Ghz

ASUS Rampage IV Formula

G.SKILL TridentX 2400Mhz 32GB DDR3

Crucial 1TB MX300 SSD

MSI Gaming X 1080Ti

Samsung 55" JS8000 SUHD 4K

Windows 10 x64

TrackIR 5, Warthog HOTAS

Saitek Pro Flight Combat Pedals

Custom Akers-Barnes, MkI eyeball.

 

Link to post
Share on other sites

I got the exact same mail from ED a couple of days back. The IP location shows its from Switzerland. I'm glad that ED blocked it.

_________________________________________________________________

Dear Kunz,

 

Someone has tried to log into your account on ED Forums with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

 

The person trying to log into your account had the following IP address: 77.109.141.138

 

All the best,

ED Forums

_________________________________________________________________

Link to post
Share on other sites

this isnt limited to ED forums at all, there are script people thay do this regularly to millions of sites a day, basically brute force attacking random sites.

Windows 10 Pro, Ryzen 2700X @ 4.6Ghz, 32GB DDR4-3200 GSkill,

X470 Taichi Ultimate, 2x R7970 Lightnings Crossfired @ 1.1/6.0GHz,

3x ASUS VS248HP + Hanns·G HZ201HPB + Oculus HMD,

Thrustmaster Warthog HOTAS + MFDs, CH Fighterstick+Pro Throttle+Pro Pedals

Link to post
Share on other sites
I'm not sure what you are worried about? They got your password wrong and ED blocked them, how does that make your account less safe?

 

It doesnt make it less safe, what I would welcome is a 2-factor auth option just as LastPass or many other sites that I use, in combination with my iphone App from Google.

 

 

An option would be cool with the next website update or such.

Asus Z370-E - 8700K@5G_delidded - 32GB - 1080GTX-Ti EK-waterblock - 1x 960Evo 250GB - 3x Samsung 850/860Pro 256GB Raid-0 - 1x Samsung 870 Evo 1TB - 2x Seagate 2TB - 32GB PageFile - Heatkiller IV - MoRa3-360LT@4x180mm fans - Corsair AXi-1200 - TiR5-Pro - Warthog Hotas - Saitek Combat Pedals - Asus PG278Q 27" QHD Gsync 144Hz - Win10Pro64 

Link to post
Share on other sites

Two factor authorization for a game forum? No thank you.

ASUS ROG Maximus VIII Hero, i7-6700K, Noctua NH-D14 Cooler, Crucial 32GB DDR4 2133, Samsung 950 Pro NVMe 256GB, Samsung EVO 250GB & 500GB SSD, 2TB Caviar Black, Zotac GTX 1080 AMP! Extreme 8GB, Corsair HX1000i, Phillips BDM4065UC 40" 4k monitor, VX2258 TouchScreen, TIR 5 w/ProClip, TM Warthog, VKB Gladiator Pro, Saitek X56, et. al., MFG Crosswind Pedals #1199, VolairSim Pit, Rift CV1 :thumbup:

Link to post
Share on other sites

sure, we know this, I watch Threat Management Systems for a living.... just that if THAT would happen every day at ED we would most likely see more of those posts such as mine and others,

and not all that got that email respond via forum.

 

I think, someone is trying to get a foot into the database with lic keys, the Apple doesnt fall far from the tree and cui bono answers most questions of why what and when.

Asus Z370-E - 8700K@5G_delidded - 32GB - 1080GTX-Ti EK-waterblock - 1x 960Evo 250GB - 3x Samsung 850/860Pro 256GB Raid-0 - 1x Samsung 870 Evo 1TB - 2x Seagate 2TB - 32GB PageFile - Heatkiller IV - MoRa3-360LT@4x180mm fans - Corsair AXi-1200 - TiR5-Pro - Warthog Hotas - Saitek Combat Pedals - Asus PG278Q 27" QHD Gsync 144Hz - Win10Pro64 

Link to post
Share on other sites
  • 4 weeks later...

I got the same message today. Only the IP address is different 5.9.36.66

Who and what these people want to do with our accounts? Do we need to change our passwords?

[sIGPIC][/sIGPIC]Everything is possible ...

Link to post
Share on other sites
I got the same message today. Only the IP address is different 5.9.36.66

Who and what these people want to do with our accounts? Do we need to change our passwords?

 

Random chinese hacker... No need to change password if it's good enough, as they only have 5 tries before the website blocks them.

The intent is to get personal info from your account, and your password might be valuable (they try the same login/password pair on other websites).

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...