Someone tried to use my account!

[hitmonlee]

not here!

on another forum

hitmonlee,

Your account on has been locked because someone has tried to log into the account with the wrong password more than 5
times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 213.115.111.135

no other users on the forum have ever used that ip.

is there any way to find out what country they are from or what isp they use?

[Jale]

I have traced the IP and this is what I've got:

TraceRoute to 213.115.111.135 [c-876f73d5.06-36-67626717.cust.bredbandsbolaget.se]

Hop(ms)(ms)(ms)
IP AddressHost name 1000
66.98.244.1gphou-66-98-244-1.ev1.net 2000
66.98.241.4gphou-66-98-241-4.ev1.net 3009
66.98.240.7gphou-66-98-240-7.ev1.net 4191
216.200.251.161t289.ge-5-2-0.mpr1.iah1.us.above.net 5141414
64.125.29.69so-4-0-0.mpr1.atl6.us.above.net 6131413
64.125.27.50so-0-0-0.mpr2.atl6.us.above.net 7252544
64.125.29.42so-2-1-0.cr1.dca2.us.above.net 8979797
64.125.31.185so-6-0-0.cr1.lhr3.uk.above.net 9979796
208.184.231.146so-0-0-0.cr2.lhr3.uk.above.net 10103103103
64.125.29.74pos10-0.cr2.ams2.nl.above.net 11103102103
208.184.231.253pos1-0.mpr2.ams1.nl.above.net 12137128128
213.115.111.135c-876f73d5.06-36-67626717.cust.bredbandsbolaget.se Trace complete

[onewecallgod]

there are whois things you can try, although they are never accurate

http://www.whois.sc/213.115.111.135

http://www.melissadata.com/Lookups/i...&submit=submit

[Zach]

role: Bredbandsbolaget Routing Registry
address: Box 47645
address: 117 94 Stockholm
address: Sweden
e-mail: noc@bredband.com
trouble: *********************************
trouble: Abuse related issues is reported
trouble: to abuse@bredband.com
trouble: phone +46 586 65485
trouble: Abuse issues sent to other e-mail
trouble: adresses will be discarded

Have fun with that.

[Lefteris_D]

You should change the password to that forum to a tougher to guess just in case.

[hitmonlee]

yeah so far today i've had people from sweden, scandinavia and brazil try and hack into my account.

grrr.

just me not the other moderators.

stupid losers need to get a life.

thanks guys

edit: lefteris, i change my password all the time and use numbers/letters, we get targetted a lot for some reason. usually arabs.

[onewecallgod]

maybe a screenname change?

[Lefteris_D]

maybe a screenname change?

That wont help much when you deal with trolls.

yeah so far today i've had people from sweden, scandinavia and brazil try and hack into my account.

grrr.

just me not the other moderators.

stupid losers need to get a life.

thanks guys

That was the question I was going to ask. Since you are a moderator there it could be a user you banned or moderated using a proxy or somebody that does not like you trying to make you look bad by using your account.

[hitmonlee]

maybe a screenname change?

i'm a mod/admin, if i change my name they'll use my new name or switch to targetting another admin.

lefteris: yeah it might be, but not really any way to tell who.

as long as they can't get in its all good.

[Lefteris_D]

This is what I suggest:

• Keep the webmaster informed about security updates(forum software) if he cannot do that on his own.
• Change your password often and if possible force the other moderators to do that as well.
• Make an addition to the rules if you don't have one that breaking into a user account of an admin or moderator will lead to a permanent ban. Though this is not nessesary it should be good for those idiots to know what they have to look forward to.
• Keep a log of the people you or the other mods ban and the reason. I require from all moderators to post at a specific thread who they banned, why and for how long. It also helps when a moderator is asked about a ban he did not place himself.

I'll send you the bill for this lesson later