Attempted account hack CAUTION ALL! - Toyota GR86, 86, FR-S and Subaru BRZ Forum & Owners Community

Chris135 · 03-28-2015, 09:48 AM

I awoke this morning to this email:

Dear Chris135,

Someone has tried to log into your account on Scion FR-S Forum | Subaru BRZ Forum | Toyota 86 GT 86 Forum | AS1 Forum - FT86CLUB with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 117.169.1.201

All the best,
Scion FR-S Forum | Subaru BRZ Forum | Toyota 86 GT 86 Forum | AS1 Forum - FT86CLUB

I have not been on the forums for some time as I no longer have an FRS. A quick Google reveals the IP is out of China which leads me to believe that this is a true hack attempt. I suggest to all to change your PW to something long and complicated also to forum owner to check IP logs for other intrusions and considering blocking the offending IPs.

Further info:
117.169.1.201 is located in China and it is assigned to CMNET ranging from 117.128.0.0 - 117.191.255.255. Hostname for CMNET is China Mobile communications corporation. You can contact Jinxia Sun at hostmaster@chinamobile.com or Phone: +86-10-52686688.

117.169.1.201 is blacklisted by 4 websites using IP Blacklist Cloud Plugin.
117.169.1.201 Details from APNIC

Object Value inetnum:117.128.0.0 - 117.191.255.255 Netname:CMNET Descr:Internet Service Provider in China Country Code:CN Country:China Person:Jinxia Sun Address:29, Jinrong Ave., Xicheng District, Beijing, 100032 Phone:+86-10-52686688 E-mail:hostmaster@chinamobile.com Hostname:China Mobile communications corporation Source:APNIC Object Value 117.169.1.201 blacklisted by 4 websites
Blacklisted IP in range 117.169.1.xxx
Blacklisted IP in range 117.169.xxx.xxx

Teseo · 03-28-2015, 10:02 AM

And why they want an account on a forum?

Chris135 · 03-28-2015, 10:14 AM

Quote:

Originally Posted by Teseo

And why they want an account on a forum?

Your account leads to your email addy and you probably use the same password for everything maybe even your email so once one account is hacked it leads to others.. paypal, banks etc.

Best bet is to use different complex passwords for each account you have. This was just a heads up, if you don't care or whatever that's up to you.

Foobar · 03-28-2015, 12:27 PM

I got a similar notification earlier in the week. Source IP was 183.223.17.115, also in China, Guangdong Mobile Communication Co.Ltd is the network owner.

extrashaky · 03-28-2015, 06:22 PM

Quote:

Originally Posted by Teseo

And why they want an account on a forum?

Quote:

Originally Posted by Chris135

Your account leads to your email addy and you probably use the same password for everything maybe even your email so once one account is hacked it leads to others.. paypal, banks etc.

LOL no. It's for spam.

If a new user account is created and used immediately for spam, it's easy for an admin to identify it and immediately kill it. The Chinese spammers have therefore started trying to hack real user accounts to use instead. If it's an established forum member with a lengthy posting history, other users will not report it as spam as quickly, and admins will not delete it as quickly. The spam stays up longer and is seen by more people.

If the idiot had succeeded in hacking your account, you would have started posting here about Chinese product offerings. Had that happen on another message board I used to read. Suddenly a forum veteran started posting nonsense posts about #1 Best Chinese Shoe!

Ec1990 · 03-28-2015, 07:03 PM

Yeah nothing to worry about. vBulletin has had these spam attacks over the last week. It's to get in and mass PM members. Nothing to worry about, and no reason to change a password if they don't get in.

ft86series1 · 03-28-2015, 09:10 PM

Had this same message not too long ago, ip lead to somewhere in India... :S

gramicci101 · 03-28-2015, 09:49 PM

It isn't even good spam. It's just word salad with random sketchy links. If it were a clear and well-thought advertisement, at least they might get somewhere.

Tcoat · 03-28-2015, 10:05 PM

Quote:

Originally Posted by gramicci101

It isn't even good spam. It's just word salad with random sketchy links. If it were a clear and well-thought advertisement, at least they might get somewhere.

Some of it can be hilarious though.

slim blanco · 03-28-2015, 10:18 PM

got the same notification email earlier this week as well. ip address 112.19.127.138.

Decay107 · 03-28-2015, 10:50 PM

Had the same on my Gearhead EFI account today. Also China.

ichitaka05 · 03-29-2015, 12:44 AM

Thanks for the info.

& my friends, keep an eye on your account & make sure to make ridiculously long pw... Speaking of that, maybe I should change my pw

Guff · 03-29-2015, 08:00 AM

Quote:

Originally Posted by ichitaka05

Thanks for the info.

& my friends, keep an eye on your account & make sure to make ridiculously long pw... Speaking of that, maybe I should change my pw

Dude hasn't your password been itchytacosuperfastracer123 since 2nd grade? Nobody will ever guess that!

ichitaka05 · 03-29-2015, 09:16 AM

Quote:

Originally Posted by Guff

Dude hasn't your password been itchytacosuperfastracer123 since 2nd grade? Nobody will ever guess that!

I bet you at east one person try that lmao

& you missed "boi" in there. itchytacosuperfastracerboi12345

ROFL

03-28-2015, 10:18 PM	#10
slim blanco Member Join Date: Jun 2014 Drives: 2017 86 Location: /\/_/ Posts: 87 Thanks: 49 Thanked 55 Times in 23 Posts Mentioned: 0 Post(s) Tagged: 0 Thread(s)	got the same notification email earlier this week as well. ip address 112.19.127.138. __________________ Flickr

03-28-2015, 10:50 PM	#11
Decay107 Turning is for Nerds Join Date: Aug 2013 Drives: 35 characters is not enough Location: PDX Posts: 1,974 Thanks: 836 Thanked 1,259 Times in 717 Posts Mentioned: 186 Post(s) Tagged: 3 Thread(s)	Had the same on my Gearhead EFI account today. Also China. __________________ My build thread / journal / evidence for warranty claim denial Motorcycle build thread

03-29-2015, 12:44 AM	#12
ichitaka05 Site Moderator Join Date: Oct 2009 Drives: ichi 86 Project Location: Middle of No where Posts: 21,048 Thanks: 7,728 Thanked 19,277 Times in 8,387 Posts Mentioned: 696 Post(s) Tagged: 28 Thread(s)	Thanks for the info. & my friends, keep an eye on your account & make sure to make ridiculously long pw... Speaking of that, maybe I should change my pw __________________

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
FRS Canadian NAV unit vs US, hack possible?	Sukh	Electronics \| Audio \| NAV \| Infotainment	0	01-05-2015 02:03 AM
Diagnostic attempted with tune in place	mid_life_crisis	Software Tuning	12	09-09-2014 06:09 PM
Attempted Break-in downtown...ughh	FR-Sh86	CANADA	22	04-02-2014 10:25 AM
Bespoke dvd hack?	Hardrock4445	Electronics \| Audio \| NAV \| Infotainment	26	04-18-2013 11:44 PM
Attempted BRZ headlight theft, happened to anyone else?	cwik	BRZ First-Gen (2012+) — General Topics	106	02-25-2013 01:42 PM

03-28-2015, 10:02 AM	#2
Teseo Senior Member Join Date: Jun 2014 Drives: frs Location: Gunsai Posts: 4,952 Thanks: 7,463 Thanked 2,978 Times in 1,801 Posts Mentioned: 23 Post(s) Tagged: 2 Thread(s)	And why they want an account on a forum?

03-28-2015, 07:03 PM	#6
Ec1990 Senior Member Join Date: Feb 2014 Drives: '14 BRZ Location: NV Posts: 183 Thanks: 14 Thanked 53 Times in 38 Posts Mentioned: 2 Post(s) Tagged: 0 Thread(s)	Yeah nothing to worry about. vBulletin has had these spam attacks over the last week. It's to get in and mass PM members. Nothing to worry about, and no reason to change a password if they don't get in.

03-28-2015, 09:10 PM	#7
ft86series1 Member Join Date: Oct 2014 Drives: FRS Location: Hamilton Posts: 98 Thanks: 2 Thanked 10 Times in 9 Posts Mentioned: 3 Post(s) Tagged: 0 Thread(s)	Had this same message not too long ago, ip lead to somewhere in India... :S

03-28-2015, 09:49 PM	#8
gramicci101 Off Topic Join Date: Feb 2014 Drives: 2014 Subaru BRZ Limited Location: Vegas, baby! Posts: 4,610 Thanks: 2,369 Thanked 4,243 Times in 2,170 Posts Mentioned: 43 Post(s) Tagged: 3 Thread(s)	It isn't even good spam. It's just word salad with random sketchy links. If it were a clear and well-thought advertisement, at least they might get somewhere.

User Name		Remember Me?
Password