"Illegal" logging in? What's the deal?

[blupencl]

First off, hi everybody. I got two emails the other day saying somebody was trying to log in here with my name (which is unusual) and using the wrong password. I can't figure out what may have happened. I doubt anybody knows I belong to this group.

More's the pity. I came over here and now I'm READING instead of WORKING!

[jessn050]

I got the same thing today. Saying that someone tried 5 times to log in to my account. I worried that maybe someone was trying to wack someone and set me up... I have wierd friends so this is no so far fetched...

<whew> at least it's not just me.

j

[lacala.girl]

I have had the same 2 emails, I guess it is a bug in the system or a way to get us to drop in well they sure got me back for a visit

[seawolf4]

I also had an e-mail saying that there were 5 attempts to log in with my user name but wrong password. I wasn't concerned because other than possibly obtaining an IP address there is no ID information. I just went and checked so also date of birth and state. Maybe a "hacker" looking to obtain ID info?

[Harry]

Just a note to those who have been receiving emails notifying you that you have been locked out of your account. I also received one. FIRST, I would strongly recommend to anyone receiving these emails....DO NOT click on the link provided in the email under any circumstances as this most likely is some sort of phishing scam that will take you to a phony website set up to appear as if you are on a legitimate site. They most likely are interested in obtaining a password used by you in various forums, including this one. Then, they may attempt to use that password to enter your personal email account & scan your emails for such things as banking info., etc.

If you go to Google and enter the IP address shown in the email it will show this to be rather widespread among a variety of forum sites. They apparently are scanning forums & obtainng email addresses listed with those forums such as this one. Additionally, you can go to a site called "Whois" and by entering the IP address it will tell you where the email you received is originating from. In my case, it was originating from Israel.

I can not reiterate strongly enough that anyone receiving this to NOT click on the link showing in the email which "appears" to direct you to TruTV. They are after your password, hoping you have used it in banking, etc. Unfortunately, many people do this. Not a safe practice! Also, you might consider notifying your ISP security people. Hope this helps. Stay safe!

[littlequeenie29]

I got one too. I googled the IP address and it comes up as being banned on alot of websites. I at least feel better knowing other people got them so it may just be a glitch? I hope?

[jessn050]

Originally Posted by Harry

DO NOT click on the link provided in the email under any circumstances as this most likely is some sort of phishing scam that will take you to a phony website set up to appear as if you are on a legitimate site. They most likely are interested in obtaining a password used by you in various forums, including this one. Then, they may attempt to use that password to enter your personal email account & scan your emails for such things as banking info., etc.

If you go to Google and enter the IP address shown in the email it will show this to be rather widespread among a variety of forum sites. They apparently are scanning forums & obtainng email addresses listed with those forums such as this one. Additionally, you can go to a site called "Whois" and by entering the IP address it will tell you where the email you received is originating from. In my case, it was originating from Israel.

I can not reiterate strongly enough that anyone receiving this to NOT click on the link showing in the email which "appears" to direct you to TruTV. They are after your password, hoping you have used it in banking, etc. Unfortunately, many people do this. Not a safe practice! Also, you might consider notifying your ISP security people. Hope this helps. Stay safe!

Um ... I clicked on the link ... AHHHHHHHH!!!!! Someone is gonna kill someone and blame it on me!!!



j

[LionRun]

Originally Posted by blupencl

First off, hi everybody. I got two emails the other day saying somebody was trying to log in here with my name (which is unusual) and using the wrong password. I can't figure out what may have happened. I doubt anybody knows I belong to this group.

More's the pity. I came over here and now I'm READING instead of WORKING!

I got an email describing the same thing. This is what I received.

Dear LionRun,

Your account on Crime Library Message Boards has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 212.143.129.223

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:
http://boards.library.trutv.com//login.php?do=lostpw

All the best,
Crime Library Message Boards

Does anyone know if the mods are aware of this, yet? I'm sorry that the board is having this issue. Too bad here are people who think and behave in this way.

Lion

[SaraSidle]

Everyone is aware of it moderator and techwise.
the following websites have been hacked

InSessions
TruTV
HelpFindtheMissing
Buffalo Bill's
Catholic Forum
and probably a lot more. It is the type of equipment being used and the IP comes back to an address in Israel.
This has been going on for a week and is being worked on.

In the meantime welcome to Crime Library

Just a note to let you in charge know I got the same emails July 11th and the IP address is out of Haifa, Israel. I forgot I even belonged to this board. How do I remove myself?

[SaraSidle]

Originally Posted by gregho

Just a note to let you in charge know I got the same emails July 11th and the IP address is out of Haifa, Israel. I forgot I even belonged to this board. How do I remove myself?

send an email or PM to Deepwater

I got these also and I haven't been here since June of 2006. So I sent a PM to Deepwater. I hope I can get my account closed/deleted.

I also got the same message with the IP of:
212.143.129.208

and I used the link which brought me here. I want to cancel my account. How?

[old_woman]

I just received the same email and I haven't been here since January 3, 2008.

[Notyavgkat]

here is a copy of my email I received today!!


Dear Notyavgkat,

Your account on Crime Library Message Boards has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 212.143.129.223

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:
http://boards.library.trutv.com//login.php?do=lostpw

All the best,
Crime Library Message Boards


Please nail whoever is doing this BS!!!

[Justme2]

I haven't posted here in a long time (although it says I have 0 posts probably due to deleted topics) I got the same email today. The link is the actual CL password recovery link. I came to CL, placed my screen name in with no password and clicked log in and it sent me to the same page the link in the email does. yes I checked the two addresses and they are exactly alike.

This happened a few years ago over at the Trading Spaces forums. We were told by the Mod there that someone was hacking into emails and gaining passwords for the forum. I strongly suggest people change their email passwords along with all forum passwords.

[richandfamous]

Originally Posted by LionRun

I got an email describing the same thing. This is what I received.



Does anyone know if the mods are aware of this, yet? I'm sorry that the board is having this issue. Too bad here are people who think and behave in this way.

Lion

Hey Lionrun! Long time no see! How the heck are ya? Email me! I got the same email. I also checked to see how many sites have been having the same problem. I changed my password again. I checked the isp and here's what I found:
IP Address Country (Short) Country (Full) Flag Region City ISP
212.143.129.200 IL ISRAEL HAZAFON KARMI'EL NV-SPEEDNET

And from a different website that had loads of info on the ip
role: Netvision NOC team
address: Omega Building
address: MATAM industrial park
address: Haifa 31905
address: Israel
phone: +972 4 8560 600
fax-no: +972 4 8551 132
e-mail: abuse@netvision.net.il

person: Michael Cohen
address: Speednet Ltd
address: 25 HaSivim St. , Petach Tikva 49170, Israel
phone: +972-4-7249756
fax-no: +972--
e-mail: michael@34up.com
nic-hdl: MC8073-RIPE
source: RIPE # Filtered

[Jennifer]

I also got the same email, and havent been here since Jan 2007.

Strange, very strange

[PandoraxXx]

I received the same email and when i checked the IP address 212.143.129.236 it is coming from Amsterdam, listed as RIPE Network Coordination Centre. I am sure Coldwater is monitoring and knows what is going on. If i change my password I will never remember it...........had this one forever and don't want to change it. What in the world could someone steal from us off the Crime Library website.

Just wondering!

Pan

[katscartoons]

Someone tried getting into my account too! The email said the IP address was 212.143.129.222

What the heck is going on?

[katscartoons]

I got an email saying my account was locked because the password was wrong 3 times - I havent even been on this board for over 6 months.

They said the IP address is
212.143.129.222

What's going on here? Why would someone hack these boards?

[katscartoons]

What's going on?
Why are our accounts being locked and who would try to hack a dumb message board list of people???

"The person trying to log into your account had the following IP address: 212.143.129.222"

Are they blocking this person??

[cougermom]

I really believe it was aimed at shutting down IS. Just MOO

[One2Snoop]

The situation has been dealt with and hopefully this will put an end to these emails. If anyone else receives the locked email notice please post it here or you can pm Deepwater or myself for that matter and I will forward the info to DW.

Have a great day everyone.

[irishlady]

I too received one of those emails and i was really relieved to see others got them.hopefully that's the last we'll hear from them.Regards Irishlady

[One2Snoop]

Originally Posted by Dunlurken

the thing that bothers me is there is no such thing as a constant IP address. They are either "static" or "moving". Can't think of the right words at the moment.

My computer went down the other day for no apparent reason. The service provider I have said my "rates" which mean "codes" were all screwed up. Obviously because someone hacked into my computer. I had to install new virus software, the whole 9-yards.

Bottom line, don't accept any e-mail (not PMs) from anyone you don't know personally.... talk on the phone too, etc. NO ONE can be trusted around here and I plan to delete both the InSession and TruTV links from my favorites.

there is no such thing as a static IP address. Unfortunately, I clicked on the link that was provided to me as a TruTV member which said someone had to try to sign into my account with the wrong password. CRASH! Down went my computer.

So, In Session and TruTV boards. Bye-Bye. It was nice knowing you guys.

JMO, and I'm sticking with it.

Sorry to hear that dunlurken. I don't think thats happened to anyone else here - at least I haven't heard anything like that happening because of the locked email notice everyone's received. Thanks for stopping by to let us know.

[Nemeton]

I got two emails today saying my account was locked. I haven't been here since August 2006 and I can't even remember what I posted on! The links in the email brought me to this site and nothing bad seems to have happened to my computer, although I am running an AVG scan. It was the Israeli IP addy.

[One2Snoop]

Originally Posted by Nemeton

I got two emails today saying my account was locked. I haven't been here since August 2006 and I can't even remember what I posted on! The links in the email brought me to this site and nothing bad seems to have happened to my computer, although I am running an AVG scan. It was the Israeli IP addy.

Would you mind posting the IP number that was listed in the email. I was told last night that a block had been put on the IP range the emails were being generated by. I just want to check to see if its the same one or different. Thanks.

[Reckless]

Originally Posted by One2Snoop

Would you mind posting the IP number that was listed in the email. I was told last night that a block had been put on the IP range the emails were being generated by. I just want to check to see if its the same one or different. Thanks.

Here ya go, Snoop: 212.143.129.200 Some have 225 for the last 3 digits

[FDInLaw]

Originally Posted by One2Snoop

The situation has been dealt with and hopefully this will put an end to these emails. If anyone else receives the locked email notice please post it here or you can pm Deepwater or myself for that matter and I will forward the info to DW.

Have a great day everyone.

Thank you O2S!!!

A big HOWDY to all the first time posters!

[leeinsmyrna]

Originally Posted by One2Snoop

Would you mind posting the IP number that was listed in the email. I was told last night that a block had been put on the IP range the emails were being generated by. I just want to check to see if its the same one or different. Thanks.

I had two notices. One with the ending number 211 and the second with 226.

Does anyone know it that the reason the in session boards are closed? I don't join in the conversation very much, but I do like to check in now and then and browse around

[irishlady]

My email ended with the digits 219.This is really annoying.Who would want to hack into our comments here unless they're a nutjob i really can't see the reason to do this.

[irishlady]

OK before the Entwistle case the last time i was on these boards was to comment on the JON BENET RAMSEY case.I really cannot see wy this nut would pick on us.

[irishlady]

can anyone tell me if this has anything to do with the insession boards being closed at the moment?

[Cavalier]

I received a similar email from TruTv Boards about a week ago. Someone had tried to access my account 5 times then the account was locked and the email sent to me. Here's the IP: 212.143.129.234


After receiving that email I posted about it on TruTV Boards and made a few other posts there as well. Then, I tried to log on yesterday, I think, and was notified I'd been banned. Emails to Coldwater got me a response that she didn't know anything about it and the admin doesn't ban anyone unless CW advises the admin to ban and that the admin hadn't even been around for two days anyway. Whatever. I've only posted there a time or two anyway, but it's the point, ya know. No one wants to be banned especially when no one knows why. Things sure are mucked up.

[Cavalier]

Originally Posted by irishlady

can anyone tell me if this has anything to do with the insession boards being closed at the moment?

Yes. It's my understanding that there's a hacker. Things have been able to be restored at TruTV Boards because it's a newer version of VBulletin. InSession is a terribly outdated version so getting the proper security (or whatever it is) in place has proven difficult.

I hope I have that right. There are posts about it at TruTV Boards.

[irishlady]

Originally Posted by Cavalier

Yes. It's my understanding that there's a hacker. Things have been able to be restored at TruTV Boards because it's a newer version of VBulletin. InSession is a terribly outdated version so getting the proper security (or whatever it is) in place has proven difficult.

I hope I have that right. There are posts about it at TruTV Boards.

whenever i try to access ttv boards 'm told they're closed for maintenance....someone please help

[One2Snoop]

Originally Posted by irishlady

whenever i try to access ttv boards 'm told they're closed for maintenance....someone please help

You get the closed for maintenance message when you try to access InSession message board. TruTv (reality TV) is a different message board, just as Crime Library is its own message board.

[Cavalier]

Originally Posted by irishlady

whenever i try to access ttv boards 'm told they're closed for maintenance....someone please help

Are you sure you're not confusing the message now seen at InSession, formerly CourtTV? http://boards.insessiontrials.com/index.php?

TruTV Message Boards were down for a short time, but have been back up for days. http://boards.trutv.com/

[J. J. in Phila]

I received a similar message. The hacker's ISP number was 212.143.129.221.

I tracked it to Haifa, Israel. (That is quite a distance from Philadelphia.)