Unauthorised Access.

[bauble]

I have received a message from Ten Tenths advising me that someone had made five attempts to log-in to my account here, using an incorrect password.

Googling the IP address shows it emanates from Bogota in Colmbia and appears to be a service for 'hiding' one's activity on the net.

I can not understand why anyone would want to log on as me

Anyone else had this problem or have any ideas about it? Who, Why?

Cheers,

Bauble

[Dave Brand]

Several people on another forum have reported a similar problem - the IP address theirs came from belongs to "China Mobile Communications". The forum has blocked access to China IPs on their server to address the problem.

[garcon]

We've had a couple of other instances of this. A good reminder to use a strong password and change it periodically. We've blocked this particular source, but no guarantee it won't happen again from elsewhere.

[bauble]

Originally Posted by garcon

We've had a couple of other instances of this. A good reminder to use a strong password and change it periodically. We've blocked this particular source, but no guarantee it won't happen again from elsewhere.

Thanks for that Garco, any ideas on why someone would want to log on using my (or anyone's) account? Simple enough to get your own account surely?

I will change my password as you suggest, but if anyone is offended by any of my posts in the future, at least I can claim; "Not me Guv".
Cheers,

Fred.

[AoB Special Stage]

Of all things they could try, why here. Nothing is members only, and (I hope) no one has put anything sensitive beyond a DoB here. And as was already stated, they could just get their own.

[chillibowl]

its ridiculous but im more worried about someone stealing my tentenths identity, posting garbage (as opposed to my usual garbage), and ruining my reputation here then i am someone stealing my money and ruining my rep at my bank.

the things we choose to care about.

but yeah, good reminder on frequently updating passwords though.

[MagnetON]

There is a lot of this about at the moment, the theory is that someone takes a forum username, tries to brute-force the password and if they get that then they check the profile for the e-mail address and hope the password is the same. Obviously with the e-mail password its an open door to identity theft.

We have taken steps to now count the number of password attempts and if there are more than a certain number within a certain time we ban the IP address from accessing anything on the server.

We have also taken steps to ban entire countries based on IP address lists.

This is in addition to our normal anti-spam protection and other measures we take to try to ensure safety and privacy for our users.

If anyone has any queries feel free to send me a PM.

[bauble]

Originally Posted by MagnetON

There is a lot of this about at the moment, the theory is that someone takes a forum username, tries to brute-force the password and if they get that then they check the profile for the e-mail address and hope the password is the same. Obviously with the e-mail password its an open door to identity theft.

We have taken steps to now count the number of password attempts and if there are more than a certain number within a certain time we ban the IP address from accessing anything on the server.

We have also taken steps to ban entire countries based on IP address lists.

This is in addition to our normal anti-spam protection and other measures we take to try to ensure safety and privacy for our users.

If anyone has any queries feel free to send me a PM.

Many thanks for your reply, it seems to answer mine and other's concerns, and it is good to know that we are in safe hands.

Well done.

Kind regards,

Fred.

[MagnetON]

Originally Posted by bauble

Many thanks for your reply, it seems to answer mine and other's concerns, and it is good to know that we are in safe hands.

Website infrastructure and security is part of my "day job"

[wnut]

Microsoft security essentials keeps having a problem and red flagging:

ns.similarlyul.xyz

hosted by tentenths

Could somebody please have a look at this.

[MagnetON]

Originally Posted by wnut

Microsoft security essentials keeps having a problem and red flagging:

ns.similarlyul.xyz

hosted by tentenths

Could somebody please have a look at this.

Not one of ours, can you mail a screenshot of any alert to webmaster@tentenths.com and I'll see what I can see.

[Dave M]

If anyone wishes to use my account to launder money, they're welcome. (For a 10% cut.)