Account Hacking Attempt......Fixed

[spyder]

Well, LONG STORY, but...Coming back from my vaca, my carry on bag got JACKED...CRAP...

In it was my laptop. Now, it was getting older and I was talking about a new one anyway....BUT - ALL THE PERSONAL INFO.

Filed a police report, in case they do something I have proof I didn't do it.

Well, for some reason, they were BRUTE FORCE ATTACKING my account on this site..Along with several others, but this site, they were relentless.

The site gives 5 tries, then you must wait 15 min. Well it HAD to be a program, as a person, it would be 16 min....18 min...whatever...

Well, I was getting an email EVERY 15 min......The site Logged the IP, and PHASES (ADMIN) blocked it for me, took them about a week and boom they are back.

Not to digress, but gotta ask...WHY?? I have no special privileges or anything here....just a regular guy like everyone else, if you are going to let your computer run days/weeks/months/years on a brute force attack, wouldn't you hit an admin or something.

Well, He did block the second IP, but we were chasing tails, so had to just get my name changed from spyder5157 to spyder.


BOTTOM-LINE: PHASES REALLY WAS A SUPER ASSET, went completely out of his way to help me. Was Really quick getting back to me, etc. I just can't thank him enough. Also, I have to mention Tokenpoke, who I went to first and he had several ideas and got me going in the right direction.

SO I THANK YOU BOTH......Phases, Just incredible support!!!!! When asked about this site, you can be sure of my answer. GREAT SUPPORT, friendly, helpful, etc.

All my very very best,
Jeff / Spyder

 

[karandpr]

Nice of you to mention this stuff .

On why hackers brute forced this site .

Forums and other sites are easy targets .
If people keep the same password for emails and credit cards as forums then hackers/crackers have a gold mine .
Normal guys are attacked first (bullies )

Always keep diverse passwords

 

[spyder]

Nice of you to mention this stuff .

On why hackers brute forced this site .

Forums and other sites are easy targets .
If people keep the same password for emails and credit cards as forums then hackers/crackers have a gold mine .
Normal guys are attacked first (bullies )

Always keep diverse passwords

Def. I always keep a small program, on my External drive "Password Keychain" to keep track. But honestly, ok, I can see paypal or ebay, but here??? Why?

Second, Brute force, in the old days, 4 character passwords (low case), ok....But a 6-7 character pass, upper case/lower/number/character, even 10 computers tied together, not gonna get it..Well I guess back up, yes I could trip over it, but stat wise, many years to get.

Your probably right though, without diverse p/w, get this try that, prob. the same, etc. Good point.

Anyway...I did change all of mine, BUT I think I may go back and make them all different, MAYBE use the random creator of the keychain software, you can set the constraints (how many char. up/low/num/char/etc.

Also, good policy to change on a regular basis, our company one FORCES you to do so, every few months or something.

OH well..

OH PS: ANYONE?? know anything about the "Lo-Jack" for laptops??

It's only 25$, and that's the one w/ the $1000 insurance if they can't get it back. w/o that it's only $15 bucks?

I had "logmein" on it till a week before losing it...crap, I could have been right in....oh well.

Anyway, thanks for the thoughts.

Spyder / jeff