Hacking? Mistake?

brian

Well Known Member

• Oct 19, 2016

• #1

I got this email from VAF at 1027 am:

Dear brian,

Your account on VAF Forums has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 91.200.12.38

It certainly wasn't me trying to log in. A hacker? Someone making a mistake? Any others seeing this?

 

DaleB

Well Known Member

• Oct 19, 2016

• #2

That's an IP address in the Ukraine. If you run a web forum, you are under constant attack from Eastern Europe and northern Africa.

 

P

PCHunt

Well Known Member

Sponsor

• Oct 19, 2016

• #3

So, for a not-very-techie guy, how do you find out where an IP address originates?

 

DaleB

Well Known Member

• Oct 19, 2016

• #4

Whois.arin.net, or whois.ripe.net in this case. ARIN and RIPE are two of the bodies that allocate IP addresses. Either site will let you dig down and find out the organization to which the IP address is assigned. Just down to the ISP or company that "owns" the IP address block, not an individual.

 

R

rv7charlie

Well Known Member

• Oct 19, 2016

• #5

PCHunt said:

So, for a not-very-techie guy, how do you find out where an IP address originates?

Click to expand...

https://www.google.com/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=whois%2091.200.12.38

oops; the google search was 'whois' followed by the ip address.

 

Raymo

Well Known Member

• Oct 20, 2016

• #6

It is common for hackers to go through a proxy server, which will mask their IP and location. The could be in China but appear to be in Africa.