Attempted account hack CAUTION ALL!
 

I awoke this morning to this email:

Dear Chris135,

Someone has tried to log into your account on Scion FR-S Forum | Subaru BRZ Forum | Toyota 86 GT 86 Forum | AS1 Forum - FT86CLUB with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 117.169.1.201

All the best,
Scion FR-S Forum | Subaru BRZ Forum | Toyota 86 GT 86 Forum | AS1 Forum - FT86CLUB


I have not been on the forums for some time as I no longer have an FRS. A quick Google reveals the IP is out of China which leads me to believe that this is a true hack attempt. I suggest to all to change your PW to something long and complicated also to forum owner to check IP logs for other intrusions and considering blocking the offending IPs.

Further info:
117.169.1.201 is located in China and it is assigned to CMNET ranging from 117.128.0.0 - 117.191.255.255. Hostname for CMNET is China Mobile communications corporation. You can contact Jinxia Sun at hostmaster@chinamobile.com or Phone: +86-10-52686688.

117.169.1.201 is blacklisted by 4 websites using IP Blacklist Cloud Plugin.
117.169.1.201 Details from APNIC

Object Value inetnum:117.128.0.0 - 117.191.255.255 Netname:CMNET Descr:Internet Service Provider in China Country Code:CN Country:China Person:Jinxia Sun Address:29, Jinrong Ave., Xicheng District, Beijing, 100032 Phone:+86-10-52686688 E-mail:hostmaster@chinamobile.com Hostname:China Mobile communications corporation Source:APNIC Object Value 117.169.1.201 blacklisted by 4 websites
Blacklisted IP in range 117.169.1.xxx
Blacklisted IP in range 117.169.xxx.xxx

And why they want an account on a forum?

Your account leads to your email addy and you probably use the same password for everything maybe even your email so once one account is hacked it leads to others.. paypal, banks etc.

Best bet is to use different complex passwords for each account you have. This was just a heads up, if you don't care or whatever that's up to you.

I got a similar notification earlier in the week. Source IP was 183.223.17.115, also in China, Guangdong Mobile Communication Co.Ltd is the network owner.

LOL no. It's for spam.

If a new user account is created and used immediately for spam, it's easy for an admin to identify it and immediately kill it. The Chinese spammers have therefore started trying to hack real user accounts to use instead. If it's an established forum member with a lengthy posting history, other users will not report it as spam as quickly, and admins will not delete it as quickly. The spam stays up longer and is seen by more people.

If the idiot had succeeded in hacking your account, you would have started posting here about Chinese product offerings. Had that happen on another message board I used to read. Suddenly a forum veteran started posting nonsense posts about #1 Best Chinese Shoe!

Yeah nothing to worry about. vBulletin has had these spam attacks over the last week. It's to get in and mass PM members. Nothing to worry about, and no reason to change a password if they don't get in.

Had this same message not too long ago, ip lead to somewhere in India... :S

It isn't even good spam. It's just word salad with random sketchy links. If it were a clear and well-thought advertisement, at least they might get somewhere.

Some of it can be hilarious though.

got the same notification email earlier this week as well. ip address 112.19.127.138.

Had the same on my Gearhead EFI account today. Also China.

Thanks for the info.

& my friends, keep an eye on your account & make sure to make ridiculously long pw... Speaking of that, maybe I should change my pw

Dude hasn't your password been itchytacosuperfastracer123 since 2nd grade? Nobody will ever guess that! :bonk:

I bet you at east one person try that lmao

& you missed "boi" in there. itchytacosuperfastracerboi12345

ROFL