Mar044 Posted April 6, 2015 Share Posted April 6, 2015 ya I got a notice also, traced the IP, comes from southern area of china, its seems like a dictionary attack, the forum locks them out after 5 tries, as long as your not dumb and don't use basic passwords you should be fine, always use upper lower and numbers, its not fool proof but Dictory attacks don't work with DCS so you should be safe, plus they forum accounts are not the same as license accounts so even if they got it your account info is isolated. Call Sign -Winter- "The North Never Forgets" Link to comment Share on other sites More sharing options...
Low Blow Posted April 27, 2015 Share Posted April 27, 2015 (edited) Ban this person please Hi ED, I received this email from you not long ago: Dear Someone has tried to log into your account on ED Forums with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes. The person trying to log into your account had the following IP address: 111.207.203.195 All the best, ED Forums This was not me trying to log in. Can you please ban this IP. IP Tracker shows: IP Locator & IP Lookup Basic Tracking Info IP Address: 111.207.203.195 Reverse DNS: ** server can't find 195.203.207.111.in-addr.arpa: SERVFAIL Hostname: 111.207.203.195 IP Blacklist Check: Suspicious, Comment Spammer Level: 23 Activity: 2 days ago [ Blacklist Check] IP Lookup Location For IP Address: 111.207.203.195 Continent: Asia (AS) Country: China (CN) Capital: Beijing State: Beijing City Location: Beijing ISP: China Unicom Beijing Organization: China Unicom Beijing AS Number: AS4808 CNCGROUP IP network China169 Beijing Province Network IP Weather Station: Beijing Sky: few clouds Temp: 24.4 ºC (max 24.4 ºC / min 24.4 ºC) Wind Speed: 1.7 m/s Wind Direction: 137.5° Humidity: 53% Cloudiness: 20% Atmospheric pressure: 993.7 kPa Time Zone: Asia/Shanghai Local Time: 10:53:50 Timezone GMT offset: 28800 Sunrise / Sunset: 05:19 / 19:04 At least we know the weather conditions there so after virtually bombing him we can RTB and land. Don't even require an instrument approach... Regards, Low Blow Edited April 30, 2015 by Low Blow [sIGPIC][/sIGPIC]Twitch: <strong> </strong> My Specs: i7 8700K, 32gig Corsair DDR4 3000Mhz, 2080ti, Obutto R3volution, VKB Gunfighter Mk.III MCG Pro EN, Warthog Throttle, Saitek Combat Pedals, Oculus Rift S MMSOBGYTAST! Link to comment Share on other sites More sharing options...
dooom Posted April 29, 2015 Share Posted April 29, 2015 Here too... Czech Republic attempt ASUS Tuf Gaming Pro x570 / AMD Ryzen 7 5800X @ 3.8 / XFX Radeon 6900 XT / 64 GB DDR4 3200 "This was not in the Manual I did not read", cried the Noob" - BMBM, WWIIOL Link to comment Share on other sites More sharing options...
GeorgeLKMT Posted April 29, 2015 Share Posted April 29, 2015 Here too... Czech Republic attempt Not me, I swear to Jagr. I don't think they (ED) can do anything about password guessing attacks from random IPs so just make your passwords safe (not 123) and you're good to go. ■ L-39C/ZA Czech cockpit mod ■ My DCS skins ■ Link to comment Share on other sites More sharing options...
TimeKilla Posted June 18, 2015 Share Posted June 18, 2015 Possible hack My dads credit card was hacked from person(s) unknown strangely I had just used to to buy a WW2 aircraft from this site I know for a fact this site is fine and nothing to do with it they tried to take £500 worth of clothes from NEXT. The credit company was on its toes and stopped it but now I cant login to eagle.ru to check my modules to see if they have been stolen aswell my steam seems ok. I Cant change password just go around and around never allowing me tho saying its changed. Can't wait for help guys already good to rebuy an X52 Pro, TrackiR 5 Thanks for your time. :joystick: YouTube :pilotfly: TimeKilla on Flight Sims over at YouTube. Link to comment Share on other sites More sharing options...
Devrim Posted June 18, 2015 Share Posted June 18, 2015 How can CC hackers access your accounts on ED sites? That's not make sense. There must be anothoer issue with it... Intel i7-14700@5.6GHz | MSI RTX4080 Super SuprimX | Corsair V. 32GB@6400MHz. | Samsung 1TB 990 PRO SSD (Win10Homex64) Samsung G5 32" + Samsung 18" + 2x8"TFT Displays | Saitek X-55 Rhino & Rudder | TM MFD Cougars | Logitech G13, G230, G510, PZ55 & Farming Sim Panel | TIR5 >>MY MODS<< | Discord: Devrim#1068 Link to comment Share on other sites More sharing options...
dooom Posted June 18, 2015 Share Posted June 18, 2015 sounds like a keylogger is on your machine. i wouldnt use that machine to log into anything until you are sure its clean ASUS Tuf Gaming Pro x570 / AMD Ryzen 7 5800X @ 3.8 / XFX Radeon 6900 XT / 64 GB DDR4 3200 "This was not in the Manual I did not read", cried the Noob" - BMBM, WWIIOL Link to comment Share on other sites More sharing options...
_Dredd Posted June 19, 2015 Share Posted June 19, 2015 Check your PC for sure. Grab Malware Bytes, run a scan. *off topic, Seems DCS site doesnt use https login etc, by default. https is enabled; but http:// doesn't default to https:// Current Flight Rig i7 4960X @ 4.6Ghz ASUS Rampage IV Formula G.SKILL TridentX 2400Mhz 32GB DDR3 Crucial 1TB MX300 SSD MSI Gaming X 1080Ti Samsung 55" JS8000 SUHD 4K Windows 10 x64 TrackIR 5, Warthog HOTAS Saitek Pro Flight Combat Pedals Custom Akers-Barnes, MkI eyeball. Link to comment Share on other sites More sharing options...
sobek Posted June 19, 2015 Share Posted June 19, 2015 doesn't default to https:// You're right, i'll talk to the admin. Good, fast, cheap. Choose any two. Come let's eat grandpa! Use punctuation, save lives! Link to comment Share on other sites More sharing options...
TimeKilla Posted June 21, 2015 Share Posted June 21, 2015 I reinstalled windows everything seems to be working now is there any idea what the issue was, was this a hack was anything compromised or just a server mishap. :joystick: YouTube :pilotfly: TimeKilla on Flight Sims over at YouTube. Link to comment Share on other sites More sharing options...
shyjonathan1588 Posted July 23, 2015 Share Posted July 23, 2015 HACKING ATTACKS I got an email someone (not me) tried to log on with my username from a foreign IP address last night. I searched the forums and I am seeing several others complain of this in the past few days. What's going on? i5-2500K @4.2 GHz | 16GB RAM | GTX460s in SLI | 1TB HDD (internal) | 1TB HDD (external via eSATA) for FRAPS recording | Thrustmaster Warthog HOTAS | Saitek Pro Flight Combat Rudder Pedals | TrackIR5 | 50" LG monitor Link to comment Share on other sites More sharing options...
fixen Posted July 24, 2015 Share Posted July 24, 2015 (edited) I got it aswell. IP Adress: 89.105.194.72 Location Doetichem, the Netherlands But it is probably a proxy IP adress Edit: I am sure it is a proxy. Host is TOR network. Edited July 24, 2015 by fixen Link to comment Share on other sites More sharing options...
BitMaster Posted July 24, 2015 Share Posted July 24, 2015 confirmed.... someone was knocking on my digital door :( ::::::::::: Dear BitMaster, Someone has tried to log into your account on ED Forums with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes. The person trying to log into your account had the following IP address: 185.14.29.221 ::::::::::: We better all check and redo the pwd's once again, aint the 1st time this year I had to redo most of them. Gigabyte Aorus X570S Master - Ryzen 5900X - Gskill 64GB 3200/CL14@3600/CL14 - Asus 1080ti EK-waterblock - 4x Samsung 980Pro 1TB - 1x Samsung 870 Evo 1TB - 1x SanDisc 120GB SSD - Heatkiller IV - MoRa3-360LT@9x120mm Noctua F12 - Corsair AXi-1200 - TiR5-Pro - Warthog Hotas - Saitek Combat Pedals - Asus PG278Q 27" QHD Gsync 144Hz - Corsair K70 RGB Pro - Win11 Pro/Linux - Phanteks Evolv-X Link to comment Share on other sites More sharing options...
BitMaster Posted July 24, 2015 Share Posted July 24, 2015 Forum Hacking Threat: 2-Factor Auth needed Hi Forum, I post this in World Forum, the admins may move it, as I think it is of general interest. Looking at my Inbox and the recent hacking attack makes me wanna have 2-Factor-Auth for ED and Forum if possible. Google Auth was fine, what do you think ? ...........here's what i had in my mail tonight, and knowing this user/pwd also protects all of my ED lics makes me a bit nervous.... :: _________________________________________________________________________ Dear BitMaster, Someone has tried to log into your account on ED Forums with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes. The person trying to log into your account had the following IP address: 185.14.29.221 __________________________________________________________________________ ...I was not the only one as you can see from other posts of today, something is going on !!! Bit Gigabyte Aorus X570S Master - Ryzen 5900X - Gskill 64GB 3200/CL14@3600/CL14 - Asus 1080ti EK-waterblock - 4x Samsung 980Pro 1TB - 1x Samsung 870 Evo 1TB - 1x SanDisc 120GB SSD - Heatkiller IV - MoRa3-360LT@9x120mm Noctua F12 - Corsair AXi-1200 - TiR5-Pro - Warthog Hotas - Saitek Combat Pedals - Asus PG278Q 27" QHD Gsync 144Hz - Corsair K70 RGB Pro - Win11 Pro/Linux - Phanteks Evolv-X Link to comment Share on other sites More sharing options...
Rangi Posted July 24, 2015 Share Posted July 24, 2015 I'm not sure what you are worried about? They got your password wrong and ED blocked them, how does that make your account less safe? PC: 6600K @ 4.5 GHz, 12GB RAM, GTX 970, 32" 2K monitor. Link to comment Share on other sites More sharing options...
StandingCow Posted July 24, 2015 Share Posted July 24, 2015 Good password habits are important, never have the same PW for two sites, and change them often. I, for one, use lastpass and have it behind 2 factor authentication. 5900X - 32 GB 3600 RAM - 1080TI My Twitch Channel ~Moo Link to comment Share on other sites More sharing options...
_Dredd Posted July 24, 2015 Share Posted July 24, 2015 And I thought I was concerned that https is not used by default when you login to the forums, or your DCS profile account... :cry: Current Flight Rig i7 4960X @ 4.6Ghz ASUS Rampage IV Formula G.SKILL TridentX 2400Mhz 32GB DDR3 Crucial 1TB MX300 SSD MSI Gaming X 1080Ti Samsung 55" JS8000 SUHD 4K Windows 10 x64 TrackIR 5, Warthog HOTAS Saitek Pro Flight Combat Pedals Custom Akers-Barnes, MkI eyeball. Link to comment Share on other sites More sharing options...
Drona Posted July 24, 2015 Share Posted July 24, 2015 I got the exact same mail from ED a couple of days back. The IP location shows its from Switzerland. I'm glad that ED blocked it. _________________________________________________________________ Dear Kunz, Someone has tried to log into your account on ED Forums with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes. The person trying to log into your account had the following IP address: 77.109.141.138 All the best, ED Forums _________________________________________________________________ Link to comment Share on other sites More sharing options...
SkateZilla Posted July 24, 2015 Share Posted July 24, 2015 this isnt limited to ED forums at all, there are script people thay do this regularly to millions of sites a day, basically brute force attacking random sites. Windows 10 Pro, Ryzen 2700X @ 4.6Ghz, 32GB DDR4-3200 GSkill (F4-3200C16D-16GTZR x2), ASRock X470 Taichi Ultimate, XFX RX6800XT Merc 310 (RX-68XTALFD9) 3x ASUS VS248HP + Oculus HMD, Thrustmaster Warthog HOTAS + MFDs Link to comment Share on other sites More sharing options...
BitMaster Posted July 24, 2015 Share Posted July 24, 2015 I'm not sure what you are worried about? They got your password wrong and ED blocked them, how does that make your account less safe? It doesnt make it less safe, what I would welcome is a 2-factor auth option just as LastPass or many other sites that I use, in combination with my iphone App from Google. An option would be cool with the next website update or such. Gigabyte Aorus X570S Master - Ryzen 5900X - Gskill 64GB 3200/CL14@3600/CL14 - Asus 1080ti EK-waterblock - 4x Samsung 980Pro 1TB - 1x Samsung 870 Evo 1TB - 1x SanDisc 120GB SSD - Heatkiller IV - MoRa3-360LT@9x120mm Noctua F12 - Corsair AXi-1200 - TiR5-Pro - Warthog Hotas - Saitek Combat Pedals - Asus PG278Q 27" QHD Gsync 144Hz - Corsair K70 RGB Pro - Win11 Pro/Linux - Phanteks Evolv-X Link to comment Share on other sites More sharing options...
cichlidfan Posted July 24, 2015 Share Posted July 24, 2015 Two factor authorization for a game forum? No thank you. ASUS ROG Maximus VIII Hero, i7-6700K, Noctua NH-D14 Cooler, Crucial 32GB DDR4 2133, Samsung 950 Pro NVMe 256GB, Samsung EVO 250GB & 500GB SSD, 2TB Caviar Black, Zotac GTX 1080 AMP! Extreme 8GB, Corsair HX1000i, Phillips BDM4065UC 40" 4k monitor, VX2258 TouchScreen, TIR 5 w/ProClip, TM Warthog, VKB Gladiator Pro, Saitek X56, et. al., MFG Crosswind Pedals #1199, VolairSim Pit, Rift CV1 :thumbup: Link to comment Share on other sites More sharing options...
BitMaster Posted July 24, 2015 Share Posted July 24, 2015 sure, we know this, I watch Threat Management Systems for a living.... just that if THAT would happen every day at ED we would most likely see more of those posts such as mine and others, and not all that got that email respond via forum. I think, someone is trying to get a foot into the database with lic keys, the Apple doesnt fall far from the tree and cui bono answers most questions of why what and when. Gigabyte Aorus X570S Master - Ryzen 5900X - Gskill 64GB 3200/CL14@3600/CL14 - Asus 1080ti EK-waterblock - 4x Samsung 980Pro 1TB - 1x Samsung 870 Evo 1TB - 1x SanDisc 120GB SSD - Heatkiller IV - MoRa3-360LT@9x120mm Noctua F12 - Corsair AXi-1200 - TiR5-Pro - Warthog Hotas - Saitek Combat Pedals - Asus PG278Q 27" QHD Gsync 144Hz - Corsair K70 RGB Pro - Win11 Pro/Linux - Phanteks Evolv-X Link to comment Share on other sites More sharing options...
kobac Posted August 20, 2015 Share Posted August 20, 2015 I got the same message today. Only the IP address is different 5.9.36.66 Who and what these people want to do with our accounts? Do we need to change our passwords? [sIGPIC][/sIGPIC]Everything is possible ... Link to comment Share on other sites More sharing options...
PiedDroit Posted August 20, 2015 Share Posted August 20, 2015 I got the same message today. Only the IP address is different 5.9.36.66 Who and what these people want to do with our accounts? Do we need to change our passwords? Random chinese hacker... No need to change password if it's good enough, as they only have 5 tries before the website blocks them. The intent is to get personal info from your account, and your password might be valuable (they try the same login/password pair on other websites). Link to comment Share on other sites More sharing options...
CHola Posted August 20, 2015 Share Posted August 20, 2015 Illegal account access attempt 20 Aug 2015, someone from 185.65.135.226 tried to illegally access my account. Mods, feel free to permaban the IP. Cheers, CHola Link to comment Share on other sites More sharing options...
Recommended Posts