WTF!? Someone has tried to log into my account on DNForum

[DNP]

I've received the following email 30 minutes ago:

Dear DNP,

Someone has tried to log into your account on DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 64.72.122.156

All the best,
DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars

and then 15 minutes ago:

Dear DNP,

As you requested, your password has now been reset. Your new details are as follows:

Username: DNP
Password: ******

To change your password, please visit this page: http://www.dnforum.com/profile.php?do=editpassword

All the best,
DNForum - Domain Sales, Domain Forum, Domain Appraisals, Domain Registrars

hm....

 

[Deleted member 5660]

How do we know this is really you?

 

[Theo]

The IP is a porn site. Looks like spam.

 

[south]

Wow... I'd be asking admins if anyone else is using that ip/range.

According to geobytes, the ip is NY. Of couse, if it's a hacker with a clue, they'd be bouncing off a compromised system, so that may be irrelevant.

The IP is a porn site. Looks like spam.

But why would a porn site be requesting a password reset for him? Someone must be doing hosting from the same IP they're using for internet access. or it's owned.

I'd change your email password too. And keep an eye out for other password reset reqs.

The IP also has no reverse dns entry.

 

[andyat11]

Traced it down the ip is hosted by http://www.alphared.com/

 

[south]

Traced it down the ip is hosted by http://www.alphared.com/

That's the provider, probably not the person on the IP.

 

[andyat11]

Not the person but they did go through them ....

 

[DNP]

I'd change your email password too. And keep an eye out for other password reset reqs.

Both DNForum and email passwords reset. Thanks, Scott!

 

[south]

No problem. Hope it was for nothing.

 

[DomainMagnate]

How do we know this is really you?

indeed

 

[DNP]

How do we know this is really you?

Easy. You send 5 digit amount in USD to my paypal account and PM me the transaction ID. I will reply you withing 24 hours with the exact amount and push any of my lll.biz domains you choose

 

[Stian]

Easy. You send 5 digit amount in USD to my paypal account and PM me the transaction ID. I will reply you withing 24 hours with the exact amount and push any of my lll.biz domains you choose

:lol:

 

[DNP]

Moderators/Admins: Could you please review this thread and check the IP as suggested below?

Thx

 

[Dale Hubbard]

http://www.vbulletin.com/forum/showthread.php?t=282133

 

[gingeman]

Have you received any other unusual emails? Like a phishing sort? I got one the other day from 'Jim domain- assistance with domain', which when I clicked on it, took me back to the login of my email account. I always report any suspicious emails and change my passwords if I slightly suspect they may have been compromised. Hope you sort this out.