Possible hack attempt

[Dreamshadow]

Just got an email which was requesting that I change my password on GT. it's from IP 82.209.197.50 and looks to be headed overseas.




  1    <1 ms    <1 ms    <1 ms  192.168.1.1
  2     1 ms     1 ms     1 ms  *.*.*.* (I blocked these because its my work pc.)
  3     5 ms     5 ms     5 ms  *.*.*.* (I blocked these because its my work pc.)
  4     5 ms     6 ms     5 ms  bb2-p7-0.rcsntx.sbcglobal.net [151.164.189.62]
  5     5 ms     5 ms     5 ms  ex2-p14-1.eqdltx.sbcglobal.net [151.164.242.42]
  6     7 ms    17 ms    17 ms  asn6453-teleglobe.eqdltx.sbcglobal.net [151.164.250.54]
  7     5 ms     5 ms     5 ms  if-5-0-0-31.core2.DTX-Dallas.as6453.net [66.198.2.37]
  8     6 ms     6 ms     6 ms  if-3-0-0-1155.core1.DTX-Dallas.as6453.net [216.6.53.89]
  9    40 ms    40 ms    40 ms  if-5-0-0-886.core3.AEQ-Ashburn.as6453.net [216.6.53.58]
 10    45 ms    45 ms    45 ms  if-5-0.core2.NTO-NewYork.as6453.net [216.6.51.6]
 11   129 ms   128 ms   128 ms  195.219.69.21
 12   158 ms   158 ms   157 ms  if-7-0-0.core1.STK-Stockholm.as6453.net [195.219.131.45]
 13   174 ms   174 ms   175 ms  ix-4-0-2.core1.STK-Stockholm.as6453.net [195.219.131.26]
 14   174 ms   174 ms   174 ms  193.232.249.81
 15   175 ms   175 ms   175 ms  93.84.125.5
 16   178 ms   179 ms   178 ms  93.84.122.4
 17   180 ms   180 ms   181 ms  93.84.122.82
 18   191 ms   186 ms   194 ms  93.84.122.182
 19   187 ms   178 ms   178 ms  82.209.195.154
 20   218 ms   232 ms   208 ms  82.209.197.50


Just documenting it in case you get hit with a lot of these.

[Destructor]

  1    <1 ms    <1 ms    <1 ms  192.168.1.1
  2     1 ms     1 ms     1 ms  *.*.*.* (I blocked these because its my work pc.)

But I know where that first IP address is - that's at my house! Get off my PC! 

(yes, I realize what that IP address always means)

[Knightshade Dragon]

Just got an email which was requesting that I change my password on GT. it's from IP 82.209.197.50 and looks to be headed overseas.




  1    <1 ms    <1 ms    <1 ms  192.168.1.1
  2     1 ms     1 ms     1 ms  *.*.*.* (I blocked these because its my work pc.)
  3     5 ms     5 ms     5 ms  *.*.*.* (I blocked these because its my work pc.)
  4     5 ms     6 ms     5 ms  bb2-p7-0.rcsntx.sbcglobal.net [151.164.189.62]
  5     5 ms     5 ms     5 ms  ex2-p14-1.eqdltx.sbcglobal.net [151.164.242.42]
  6     7 ms    17 ms    17 ms  asn6453-teleglobe.eqdltx.sbcglobal.net [151.164.250.54]
  7     5 ms     5 ms     5 ms  if-5-0-0-31.core2.DTX-Dallas.as6453.net [66.198.2.37]
  8     6 ms     6 ms     6 ms  if-3-0-0-1155.core1.DTX-Dallas.as6453.net [216.6.53.89]
  9    40 ms    40 ms    40 ms  if-5-0-0-886.core3.AEQ-Ashburn.as6453.net [216.6.53.58]
 10    45 ms    45 ms    45 ms  if-5-0.core2.NTO-NewYork.as6453.net [216.6.51.6]
 11   129 ms   128 ms   128 ms  195.219.69.21
 12   158 ms   158 ms   157 ms  if-7-0-0.core1.STK-Stockholm.as6453.net [195.219.131.45]
 13   174 ms   174 ms   175 ms  ix-4-0-2.core1.STK-Stockholm.as6453.net [195.219.131.26]
 14   174 ms   174 ms   174 ms  193.232.249.81
 15   175 ms   175 ms   175 ms  93.84.125.5
 16   178 ms   179 ms   178 ms  93.84.122.4
 17   180 ms   180 ms   181 ms  93.84.122.82
 18   191 ms   186 ms   194 ms  93.84.122.182
 19   187 ms   178 ms   178 ms  82.209.195.154
 20   218 ms   232 ms   208 ms  82.209.197.50


Just documenting it in case you get hit with a lot of these.

Whoa....good to know.   I'll dig into it.

[Gratch]

Dunno if this hack has anything to do with it, but things seem to be running pretty slow tonight.

[CeeKay]

Dunno if this hack has anything to do with it, but things seem to be running pretty slow tonight.

I was just coming in to see if anyone had mentioned that; I'm getting some unusual slowness too.

[Razgon]

same here...

[ATB]

Don't know if it's related, but after I post now, it's returning me to the top of the thread instead of to the post I just posted. Is that a setting I accidentally changed or part of something nefarious?

[Dreamshadow]

No further email messages, and I changed my password anyway, just in case.

[Knightshade Dragon]

No further email messages, and I changed my password anyway, just in case.

Smart move.  I'm doing a security audit over the weekend just to make sure.