February 13th, 2015, 11:03 AM | #1 |
ninjette.org dude
Name: 1 guess :-)
Location: SF Bay Area
Join Date: Jun 2008 Motorcycle(s): '13 Ninja 300 (white, the fastest color!), '13 R1200RT, '14 CRF250L, '12 TT-R125LE Posts: Too much.
Blog Entries: 7
|
Hackers trying your password at Ninjette
Hi all -
Getting a handful of notifications each day, that a user is trying to log into an account here 5 times, and is locked out for 15 minutes before being able to try again. The reason I am seeing the notifications is that an email is then sent out to warn the user that something may be going on, and then that email is bouncing because the user hasn't been here in so long that their email account is no longer the same. So I'm probably only seeing a subset of these, and many might not be bouncing back because the emails are still valid. These attempts log the IP address, but the problem is that just about every one is coming from a completely different IP. It appears to be a persistent effort, used by proxies and/or botnets, that is not trivial to prevent, while keeping the site still usable / accessible. So - consider changing your password on this site and others from time to time. Use as strong a password as you are comfortable with. Consider using a password manager like LastPass or DashLane, which both automate using very complicated passwords on all the sites & apps you use. And let me know if you're seeing anything strange; I'll do the same here. - Alex
__________________________________________________
Montgomery Street Motorcycle Club / cal24.com / crf250l.org / ninjette.org ninjette.org Terms of Service Shopping for motorcycle parts or equipment? Come here first. The friendliest Ninja 250R/300/400 forum on the internet! (especially Unregistered) |
5 out of 5 members found this post helpful. |
February 16th, 2015, 08:29 PM | #2 |
The Corner Whisperer
Name: Chris (aka Reactor)
Location: Northern KY
Join Date: May 2011 Motorcycle(s): 2010 250 (track), 1992 250, 2006 R6 (street/track), 2008 R6 (track) Posts: Too much.
MOTY 2015, MOTM - Nov '12, Nov '13
|
__________________________________________________
Goal: Shake A Million Hands | Look through the corners | Track Day Prep | Closest track? | The Mid-Ohio School |
|
February 17th, 2015, 07:22 AM | #3 |
1/4 English, 3/4 Kick Ass
Name: Jeremy
Location: Dayton, OH
Join Date: Sep 2011 Motorcycle(s): 2002 Triumph Speed Triple 955i, '05 Suzuki SV650S(retired), '11 Ninja 250R(sold) Posts: A lot.
|
Thank you!
|
|
February 17th, 2015, 08:45 AM | #4 |
ninjette.org guru
Name: Luis
Location: Miami
Join Date: Sep 2014 Motorcycle(s): 1995 Ninja 250, 2005 R6, 2002 Ducati Monster S4 Posts: 250
|
on another forum i am in .. a new user ( with one post) wrote the following..
Sorry if this is in the wrong place. I received an automated email stating that there were failed attempts to log in under my user name. the IP Address 120.202.249.205 This address is linked to multiple fourm attacks and is from China. Blocking the upstream servers would be advisable. Thank you. name is Xoy geha from New Mexico, Las Cruces... one post and putting that up on that other forum.. i'll be changing my password soon.. |
|
February 17th, 2015, 08:57 AM | #5 |
ninjette.org certified postwhore
Name: Ant
Location: Wooster
Join Date: Dec 2013 Motorcycle(s): Ducati 999 2012 Ninja 250r Ducati748 Yellow finally running 2003 SV650 S (SOLD) Posts: A lot.
|
Danger FYI
Just received an E-mail someone attempted 5x to log into my account. I am the only person with the password (wife and friends dont have it) to this account so someone is trying to hack NINJETTE.ORG. Keep an eye on your own accounts.
|
|
February 17th, 2015, 10:09 AM | #6 |
Certified looney toon
Name: Teri
Location: 39°52'40.7"N 118°23'53.8"W (Northern NV)
Join Date: Jun 2012 Motorcycle(s): 2012 Ninja 250, 102k+ miles -- 2014 CB500X, 42k+ miles Posts: A lot.
Blog Entries: 16
MOTM Jul '13, Jul '14
|
@Ducati999, here's some info.
__________________________________________________
<-- Linky Hey Unregistered! The code [you] shows the username currently logged in. IBA # 56020 AMA # 521481 Fun Rides! ][ My Videos ][ My Gear Hold yourself to the same rules you expect others to follow. |
|
February 17th, 2015, 10:32 AM | #7 | |
ninjette.org dude
Name: 1 guess :-)
Location: SF Bay Area
Join Date: Jun 2008 Motorcycle(s): '13 Ninja 300 (white, the fastest color!), '13 R1200RT, '14 CRF250L, '12 TT-R125LE Posts: Too much.
Blog Entries: 7
|
Quote:
__________________________________________________
Montgomery Street Motorcycle Club / cal24.com / crf250l.org / ninjette.org ninjette.org Terms of Service Shopping for motorcycle parts or equipment? Come here first. The friendliest Ninja 250R/300/400 forum on the internet! (especially Unregistered) |
|
|
February 17th, 2015, 10:59 AM | #8 |
1/4 English, 3/4 Kick Ass
Name: Jeremy
Location: Dayton, OH
Join Date: Sep 2011 Motorcycle(s): 2002 Triumph Speed Triple 955i, '05 Suzuki SV650S(retired), '11 Ninja 250R(sold) Posts: A lot.
|
Yeah I just got another email on a airsoft forum I used to be on years ago.
|
|
February 17th, 2015, 11:44 AM | #10 |
ninjette.org dude
Name: 1 guess :-)
Location: SF Bay Area
Join Date: Jun 2008 Motorcycle(s): '13 Ninja 300 (white, the fastest color!), '13 R1200RT, '14 CRF250L, '12 TT-R125LE Posts: Too much.
Blog Entries: 7
|
Dear internet bad guys: Please stop.
__________________________________________________
Montgomery Street Motorcycle Club / cal24.com / crf250l.org / ninjette.org ninjette.org Terms of Service Shopping for motorcycle parts or equipment? Come here first. The friendliest Ninja 250R/300/400 forum on the internet! (especially Unregistered) |
3 out of 3 members found this post helpful. |
February 17th, 2015, 02:06 PM | #11 |
ninjette.org member
Name: Amy
Location: PA
Join Date: Mar 2012 Motorcycle(s): 2009 Ninja 250R EFI Posts: 58
|
got an email yesterday about my username trying to be hacked as well. from IP: 213.238.128.130.
|
|
February 17th, 2015, 03:51 PM | #12 |
ninjette.org member
Name: Dave
Location: Southwest VA
Join Date: Dec 2009 Motorcycle(s): 2001 EX250 Posts: 58
|
2-17-15 12:45 am, IP 84.72.142.174. Traces to Wohlen, Switzerland. Of course, IPs can be spoofed. While looking up that IP, I came across an interesting anti-spammer/harvester/attacker project:
https://www.projecthoneypot.org/faq.php Also, you can check an IP address to see what kind of "record" it has: https://www.projecthoneypot.org/search_ip.php |
|
February 17th, 2015, 04:07 PM | #13 |
Certified looney toon
Name: Teri
Location: 39°52'40.7"N 118°23'53.8"W (Northern NV)
Join Date: Jun 2012 Motorcycle(s): 2012 Ninja 250, 102k+ miles -- 2014 CB500X, 42k+ miles Posts: A lot.
Blog Entries: 16
MOTM Jul '13, Jul '14
|
Given the lengths and complexity of passwords I have to use on a daily basis, I am always reminded of the XKCD comic.
__________________________________________________
<-- Linky Hey Unregistered! The code [you] shows the username currently logged in. IBA # 56020 AMA # 521481 Fun Rides! ][ My Videos ][ My Gear Hold yourself to the same rules you expect others to follow. |
1 out of 1 members found this post helpful. |
February 17th, 2015, 04:26 PM | #14 |
ninjette.org dude
Name: 1 guess :-)
Location: SF Bay Area
Join Date: Jun 2008 Motorcycle(s): '13 Ninja 300 (white, the fastest color!), '13 R1200RT, '14 CRF250L, '12 TT-R125LE Posts: Too much.
Blog Entries: 7
|
This attack is hard to prevent. We have a ton of anti-spammer type controls in place here that work pretty well. There are hundreds (some days thousands) of attempts to sign up new accounts. All of those are validated through anti-spam databases. Even after someone gets past that, their first few posts have a pretty stringent spam filter, so it catches them before it is shown to others, and they can be easily deleted.
But - just the process of attempting to log in, it's hard to block ahead of time. Yes, I can list any individual IP address or network to be blocked to the forum, but it becomes an unwinnable game of whackamole. I haven't seen a dupe IP yet in the hundreds of notifications I've looked through. And there is no provision for vBulletin to dynamically check an IP before even allowing it to attempt to log in, against the known spammer addresses. It can maybe be done at the server level, through mods to apache, but again, it needs to be dynamic and updated automatically, or it is pointless.
__________________________________________________
Montgomery Street Motorcycle Club / cal24.com / crf250l.org / ninjette.org ninjette.org Terms of Service Shopping for motorcycle parts or equipment? Come here first. The friendliest Ninja 250R/300/400 forum on the internet! (especially Unregistered) |
|
February 17th, 2015, 04:31 PM | #15 |
wat
Name: wat
Location: tustin/long beach
Join Date: Sep 2009 Motorcycle(s): wat Posts: Too much.
Blog Entries: 5
MOTM - Oct '12, Feb '14
|
come on, it's totally easy.
just add an extra field to the login screen that says "what are you?" and remove the people who answer "Spam bot"
__________________________________________________
|
1 out of 1 members found this post helpful. |
February 17th, 2015, 04:47 PM | #16 |
.
Name: .
Location: .
Join Date: Aug 2014 Motorcycle(s): . Posts: A lot.
MOTM - July '15
|
I dunno about most of you guys, but I stay logged in most of the time. Alex, if you added a captcha to the login, I personally wouldn't mind. Might wanna get the feedback of other ninjetters, though
|
1 out of 1 members found this post helpful. |
February 17th, 2015, 04:53 PM | #17 |
ninjette.org sage
Name: James
Location: Lakeland
Join Date: Aug 2014 Motorcycle(s): 2007 Ninjette Posts: 809
|
If you had read the Terms and Conditions in its entirety, you would've seen "no spam bots allowed"
__________________________________________________
"That's what" -she |
|
February 17th, 2015, 05:23 PM | #18 |
wat
Name: wat
Location: tustin/long beach
Join Date: Sep 2009 Motorcycle(s): wat Posts: Too much.
Blog Entries: 5
MOTM - Oct '12, Feb '14
|
i have no issue typing a captcha when i need to log in. but i know some people are less able to recognize a picture of numbers on the side of a house.
__________________________________________________
|
|
February 17th, 2015, 05:36 PM | #19 |
ninjette.org dude
Name: 1 guess :-)
Location: SF Bay Area
Join Date: Jun 2008 Motorcycle(s): '13 Ninja 300 (white, the fastest color!), '13 R1200RT, '14 CRF250L, '12 TT-R125LE Posts: Too much.
Blog Entries: 7
|
I've found scripts to auto-populate the blocking lists with the Spamhaus and other blocklists, but running the last handful of IPs coming through on the notifications shows them all to still be clean on Spamhaus (in other words, it wouldn't block them then, and it still wouldn't block them now). Captcha for login is not directly available; which is a little surprising, as it is available for registration, posting, contact us, searching, etc. Just not as a requirement for each login. There was a mod for 3.6 to add it, but it hasn't been updated for years and isn't compatible with this version.
While this is annoying, I don't know of 1 user who has had their account taken over yet, assuming that the first thing someone would do is start posting up spam of some sort.
__________________________________________________
Montgomery Street Motorcycle Club / cal24.com / crf250l.org / ninjette.org ninjette.org Terms of Service Shopping for motorcycle parts or equipment? Come here first. The friendliest Ninja 250R/300/400 forum on the internet! (especially Unregistered) |
|
February 17th, 2015, 11:22 PM | #20 |
Freedom for Germany
Location: This World
Join Date: May 2011 Motorcycle(s): Ninja 250R-FI Posts: A lot.
|
- why worry when the gents (or should I better use another word for them?) are sitting inside your harddisk and watch your activity from there?
http://arstechnica.com/security/2015...found-at-last/ |
|
February 17th, 2015, 11:48 PM | #21 |
.
Name: .
Location: .
Join Date: Aug 2014 Motorcycle(s): . Posts: A lot.
MOTM - July '15
|
^read about that in popsci earlier today. Thats some mad scientist crap right there.
|
|
February 18th, 2015, 07:43 AM | #22 |
ninjette.org dude
Name: 1 guess :-)
Location: SF Bay Area
Join Date: Jun 2008 Motorcycle(s): '13 Ninja 300 (white, the fastest color!), '13 R1200RT, '14 CRF250L, '12 TT-R125LE Posts: Too much.
Blog Entries: 7
|
It looks like they were able to pop one account (@Viskoner) last night, and have used it to send an annoying spam to a number of members via PM. I have since deleted all of them, so if you received a notification and yet don't see it now; that's why. Viskoner's password has been changed, and I had to change his email as well, as I have no idea whether it points to him or the spammer. If you are reading this, please use the "contact us" link at the bottom of any page to get in touch and work to get your account restored to normal.
I didn't receive one here, but I got the same spam via a PM on another forum I am on last night as well, so this looks pretty widespread. Use appropriate passwords, and change them every once in awhile to minimize the chances of this.
__________________________________________________
Montgomery Street Motorcycle Club / cal24.com / crf250l.org / ninjette.org ninjette.org Terms of Service Shopping for motorcycle parts or equipment? Come here first. The friendliest Ninja 250R/300/400 forum on the internet! (especially Unregistered) |
1 out of 1 members found this post helpful. |
February 18th, 2015, 10:21 AM | #24 | |
ninjette.org certified postwhore
Name: Al
Location: York, Pa
Join Date: Dec 2012 Motorcycle(s): 2013 Ninja 300..............2008 Ninja 500-sold...2009 Ninja 250-Crashed Posts: Too much.
MOTM - Sep '14
|
Quote:
Help keep our protector motivated.
__________________________________________________
Keep calm and ride on -Motofool Never quit on a rainy day -ally99 |
|
|
February 18th, 2015, 01:30 PM | #25 |
Inline 4!!!
Name: Danny
Location: MA
Join Date: May 2014 Motorcycle(s): 2008 CBR600rr, 1987 KLR 250 Posts: A lot.
|
Thanks for all your hard work Alex, I appreciate it. It must be difficult to run this entire site solo.
__________________________________________________
Be careful. Remember you are invisible |
|
February 18th, 2015, 03:45 PM | #26 |
Que Buenos Son!!!
Name: Ryan
Location: Grovetucky, OH
Join Date: Jun 2012 Motorcycle(s): Aprilia Shiver 750, Husaberg FE 450, Ninja 300 (sold), xr100 Posts: A lot.
MOTM - Nov '14
|
Yeah I received one of those spam private messages this morning. I guess it was from that viskoner guy cause it's been deleted. I also just changed my password to be safe. Thanks @Alex
__________________________________________________
Don't do something because it's easy,.. Do it because it's not! If you aren't going forward, then you're falling behind. "Drive it like you stole it"!!! |
|
February 21st, 2015, 11:10 AM | #27 |
sammich maker
Name: snot
Location: West Ohio - in the kitchen
Join Date: Feb 2012 Motorcycle(s): 2013 white 300, 09 KLX 250 SF, 09 thunder blue 250(traded) Posts: A lot.
MOTM - Apr '15
|
spam pm?
I know a few of you also received a pm from a memnber who had not been on in 2 years.
@Alex is this from someone hacking into the users profile?
__________________________________________________
https://www.brocksperformance.com/VZ...0035+C450.aspx |
|
February 21st, 2015, 11:25 AM | #28 |
ninjette.org certified postwhore
Name: Inderveer
Location: San Jose
Join Date: Nov 2012 Motorcycle(s): '07 ex250-F/J Posts: A lot.
|
|
|
February 21st, 2015, 03:08 PM | #29 | |
Down Under
Name: Linkin
Location: Sydney, Australia
Join Date: Jun 2014 Motorcycle(s): Kawasaki ZXR250C Ninja Posts: 296
|
Quote:
|
|
|
February 21st, 2015, 04:01 PM | #30 |
ninjette.org certified postwhore
Name: Rick
Location: Alexandria, Louisiana
Join Date: Jan 2009 Motorcycle(s): 05 Blue Ninja 250 Posts: Too much.
MOTY - 2017, MOTM - Jan '19, Oct '16, May '14
|
I got the same spam as well.
|
|
February 21st, 2015, 05:14 PM | #31 |
ninjette.org dude
Name: 1 guess :-)
Location: SF Bay Area
Join Date: Jun 2008 Motorcycle(s): '13 Ninja 300 (white, the fastest color!), '13 R1200RT, '14 CRF250L, '12 TT-R125LE Posts: Too much.
Blog Entries: 7
|
All gone. Thx, folks. Sorry for the trouble.
__________________________________________________
Montgomery Street Motorcycle Club / cal24.com / crf250l.org / ninjette.org ninjette.org Terms of Service Shopping for motorcycle parts or equipment? Come here first. The friendliest Ninja 250R/300/400 forum on the internet! (especially Unregistered) |
1 out of 1 members found this post helpful. |
February 21st, 2015, 07:15 PM | #33 |
The Corner Whisperer
Name: Chris (aka Reactor)
Location: Northern KY
Join Date: May 2011 Motorcycle(s): 2010 250 (track), 1992 250, 2006 R6 (street/track), 2008 R6 (track) Posts: Too much.
MOTY 2015, MOTM - Nov '12, Nov '13
|
Same here... rjtrookie
__________________________________________________
Goal: Shake A Million Hands | Look through the corners | Track Day Prep | Closest track? | The Mid-Ohio School |
|
February 21st, 2015, 07:16 PM | #34 |
dirty boy
Name: Joe
Location: Johnstown, PA
Join Date: Sep 2012 Motorcycle(s): I don't even know anymore?? Posts: A lot.
MOTM - Apr '14
|
^ this
__________________________________________________
I love the smell of burning pre-mix in the morning I don't think I'm a lot dumber than you thought that I think that I thought I was once. |
|
February 21st, 2015, 07:23 PM | #35 |
ninjette.org dude
Name: 1 guess :-)
Location: SF Bay Area
Join Date: Jun 2008 Motorcycle(s): '13 Ninja 300 (white, the fastest color!), '13 R1200RT, '14 CRF250L, '12 TT-R125LE Posts: Too much.
Blog Entries: 7
|
All gone.
__________________________________________________
Montgomery Street Motorcycle Club / cal24.com / crf250l.org / ninjette.org ninjette.org Terms of Service Shopping for motorcycle parts or equipment? Come here first. The friendliest Ninja 250R/300/400 forum on the internet! (especially Unregistered) |
|
February 21st, 2015, 08:18 PM | #37 |
.
Name: .
Location: .
Join Date: Aug 2014 Motorcycle(s): . Posts: A lot.
MOTM - July '15
|
Yeah thanks! Preciate it :-)
|
|
February 21st, 2015, 09:50 PM | #38 |
wat
Name: wat
Location: tustin/long beach
Join Date: Sep 2009 Motorcycle(s): wat Posts: Too much.
Blog Entries: 5
MOTM - Oct '12, Feb '14
|
i've been getting these really weird PMs from a few members...
but they're just weird people. i try to understand.
__________________________________________________
|
|
February 22nd, 2015, 02:22 AM | #39 |
ninjette.org certified postwhore
Name: Inderveer
Location: San Jose
Join Date: Nov 2012 Motorcycle(s): '07 ex250-F/J Posts: A lot.
|
Hang in there; Alex can only take care of one thing at a time.
|
|
February 22nd, 2015, 05:55 AM | #40 |
Certified Troublemaker
Name: Teri
Location: Hamilton, NJ
Join Date: Oct 2012 Motorcycle(s): 2006 Ninja 250r "Pikachu", 2017 Ninja 650 "Epona" Posts: A lot.
MOTM - Aug '13, Aug '14, Feb '17
|
Just got one from Timm3h.
__________________________________________________
Raven's Rejuvenation A bruise is a lesson... and each lesson makes us better... |
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
How Secure Is My Password Dot Net | Jiggles | Off-Topic | 3 | August 15th, 2012 07:33 PM |
My Ninjette | lc86 | Pictures | 2 | June 12th, 2012 08:04 AM |
If not a Ninjette, what else? | CmichRider | General Motorcycling Discussion | 14 | April 24th, 2011 07:26 AM |
thank you ninjette. | darrell85 | Off-Topic | 19 | September 9th, 2010 01:31 PM |
My Ninjette | brianhilker | Pictures | 7 | October 16th, 2009 03:20 PM |
|
|