WTF!? Someone has tried to log into my account on DNForum - DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars

DNP · 08-19-2008, 10:39 PM

I've received the following email 30 minutes ago:

Dear DNP,

Someone has tried to log into your account on DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 64.72.122.156

All the best,
DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars

and then 15 minutes ago:

Dear DNP,

As you requested, your password has now been reset. Your new details are as follows:

Username: DNP
Password: ******

To change your password, please visit this page: http://www.dnforum.com/profile.php?do=editpassword

All the best,
DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars

hm....

**Keyword Factory** · 08-19-2008, 10:45 PM

How do we know this is really you?

**Acro** · 08-19-2008, 10:52 PM

The IP is a porn site. Looks like spam.

**south** · 08-19-2008, 10:53 PM

Wow... I'd be asking admins if anyone else is using that ip/range.

According to geobytes, the ip is NY. Of couse, if it's a hacker with a clue, they'd be bouncing off a compromised system, so that may be irrelevant.

Quote:

Originally Posted by Acro

The IP is a porn site. Looks like spam.

But why would a porn site be requesting a password reset for him? Someone must be doing hosting from the same IP they're using for internet access. or it's owned.

I'd change your email password too. And keep an eye out for other password reset reqs.

The IP also has no reverse dns entry.

andyat11 · 08-19-2008, 11:05 PM

Traced it down the ip is hosted by http://www.alphared.com/

**south** · 08-19-2008, 11:07 PM

Quote:

Originally Posted by andyat11

Traced it down the ip is hosted by http://www.alphared.com/

That's the provider, probably not the person on the IP.

andyat11 · 08-19-2008, 11:08 PM

Not the person but they did go through them ....

DNP · 08-19-2008, 11:14 PM

Quote:

Originally Posted by south

I'd change your email password too. And keep an eye out for other password reset reqs.

Both DNForum and email passwords reset. Thanks, Scott!

**south** · 08-19-2008, 11:18 PM

No problem. Hope it was for nothing.

**DomainMagnate** · 08-20-2008, 01:26 AM

Quote:

Originally Posted by Keyword Factory

How do we know this is really you?

indeed

DNP · 08-20-2008, 02:10 AM

Quote:

Originally Posted by Keyword Factory

How do we know this is really you?

Easy. You send 5 digit amount in USD to my paypal account and PM me the transaction ID. I will reply you withing 24 hours with the exact amount and push any of my lll.biz domains you choose

pcproffenno · 08-20-2008, 02:30 AM

Quote:

Originally Posted by DNP

Easy. You send 5 digit amount in USD to my paypal account and PM me the transaction ID. I will reply you withing 24 hours with the exact amount and push any of my lll.biz domains you choose

DNP · 08-20-2008, 09:54 PM

Moderators/Admins: Could you please review this thread and check the IP as suggested below?

Thx

**aZooZa** · 08-21-2008, 05:03 AM

http://www.vbulletin.com/forum/showthread.php?t=282133

**gingeman** · 08-21-2008, 08:14 AM

Have you received any other unusual emails? Like a phishing sort? I got one the other day from 'Jim domain- assistance with domain', which when I clicked on it, took me back to the login of my email account. I always report any suspicious emails and change my passwords if I slightly suspect they may have been compromised. Hope you sort this out.

08-19-2008, 10:39 PM	#1 (permalink)
DNP Exclusive Senior Member Last Online: Yesterday 02:56 AM iTrader: (244) Join Date: Nov 2006 Posts: 7,269 DNF$: 351 Location: Canada Country:	WTF!? Someone has tried to log into my account on DNForum I've received the following email 30 minutes ago: Dear DNP, Someone has tried to log into your account on DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes. The person trying to log into your account had the following IP address: 64.72.122.156 All the best, DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars and then 15 minutes ago: Dear DNP, As you requested, your password has now been reset. Your new details are as follows: Username: DNP Password: **** To change your password, please visit this page: http://www.dnforum.com/profile.php?do=editpassword All the best, DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars hm.... __________________ * List of Top 1 Million U.S. Web Sites (September 2009) * Exclusive offer for DNForum members is back!**

08-19-2008, 10:45 PM	#2 (permalink)
Keyword Factory DNF Addict Last Online: 11-14-2009 07:38 PM iTrader: (115) Join Date: Nov 2003 Posts: 1,694 DNF$: 5,360 Location: New Jersey Country:	How do we know this is really you? __________________ Trademarks.org - trademark information

08-19-2008, 10:52 PM	#3 (permalink)
Acro Bloody lovely Last Online: Yesterday 08:07 PM iTrader: (394) Join Date: Feb 2004 Posts: 23,903 DNF$: 4,071 Location: USA Country:	The IP is a porn site. Looks like spam. __________________ DomainGang.com - Domainers' Most Awesome News Source Acroplex - Web & Graphics Acro.net - My Blog My Countdown Counting down to: Snapnames rebate hitting my mailbox 80 days 8 hours 10 minutes

08-19-2008, 11:18 PM	#9 (permalink)
south DNF Addict Name: Scott Last Online: Today 01:30 PM iTrader: (138) Join Date: Dec 2006 Posts: 3,134 DNF$: 2,667 Location: 33143/04930 Country:	No problem. Hope it was for nothing. __________________ All offers valid for 72 hours except running auctions. SJCParking.com \| SFOOffsiteParking.com \| LaGuardiaParking.net

08-20-2008, 09:54 PM	#13 (permalink)
DNP Exclusive Senior Member Last Online: Yesterday 02:56 AM iTrader: (244) Join Date: Nov 2006 Posts: 7,269 DNF$: 351 Location: Canada Country:	Moderators/Admins: Could you please review this thread and check the IP as suggested below? Thx __________________ * List of Top 1 Million U.S. Web Sites (September 2009) * Exclusive offer for DNForum members is back!

08-19-2008, 11:05 PM	#5 (permalink)
andyat11 Last Online: Today 01:25 AM iTrader: (18) Join Date: Aug 2004 Posts: 814 DNF$: 616 Country:	Traced it down the ip is hosted by http://www.alphared.com/

08-19-2008, 11:08 PM	#7 (permalink)
andyat11 Last Online: Today 01:25 AM iTrader: (18) Join Date: Aug 2004 Posts: 814 DNF$: 616 Country:	Not the person but they did go through them ....

08-21-2008, 05:03 AM	#14 (permalink)
aZooZa Name: Dale Hubbard Last Online: Today 04:54 AM iTrader: (45) Join Date: Jan 2003 Posts: 5,874 DNF$: 5,869 Location: Exeter, UK Country:	http://www.vbulletin.com/forum/showthread.php?t=282133 __________________ UK Drop Catching Services: Dropsystem.co.uk New! Canada TBR Drop Catching: Dropping.ca New! QUALITY MiniSites: NOTsoMINI.com

08-21-2008, 08:14 AM	#15 (permalink)
gingeman Name: Chris Last Online: 11-20-2009 12:32 PM iTrader: (64) Join Date: Apr 2006 Posts: 1,514 DNF$: 796 Location: A95.com Country:	Have you received any other unusual emails? Like a phishing sort? I got one the other day from 'Jim domain- assistance with domain', which when I clicked on it, took me back to the login of my email account. I always report any suspicious emails and change my passwords if I slightly suspect they may have been compromised. Hope you sort this out. __________________ Accurate Names Sign Up for the accuratename.com newsletter FOR SALE NOW: W-U.com $6k

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode