Go Back   Team-BHP > Around the Corner > Shifting gears


Reply
 
Thread Tools Search this Thread
Old 27th November 2011, 09:50   #16
BHPian
 
Join Date: Oct 2007
Location: Bangalore
Posts: 296
Thanked: 163 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

mine was 186.215.245.190 (Brazil)...

I have my password coded into my browser and don't remember it...so going to be tough to change it!
manasm is offline   Reply With Quote
Old 27th November 2011, 09:54   #17
BHPian
 
sumeshmani's Avatar
 
Join Date: Oct 2011
Location: bangalore
Posts: 477
Thanked: 104 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

what measures should we members take to secure our login credentials?
sumeshmani is offline   Reply With Quote
Old 27th November 2011, 10:01   #18
BHPian
 
Alter_Ego's Avatar
 
Join Date: May 2009
Location: Melbourne
Posts: 443
Thanked: 97 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

Quote:
Originally Posted by manasm View Post
mine was 186.215.245.190 (Brazil)...

I have my password coded into my browser and don't remember it...so going to be tough to change it!
the browser stores the password in UNencrypted format.You can click on tabs and view it.So fetching it should not be difficult for you.
Alter_Ego is offline   Reply With Quote
Old 27th November 2011, 10:32   #19
Senior - BHPian
 
libranof1987's Avatar
 
Join Date: Sep 2010
Location: All over!
Posts: 3,551
Thanked: 2,487 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

Whoa! There are so many instances?!

I had my account attempt-hacked by 41.34.50.173.

Not cool!

This was on Nov 10 though.

Last edited by libranof1987 : 27th November 2011 at 10:42.
libranof1987 is online now   Reply With Quote
Old 27th November 2011, 10:38   #20
Distinguished - BHPian
 
RavenAvi's Avatar
 
Join Date: Jun 2011
Location: Flying Around
Posts: 5,090
Thanked: 25,427 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

Time - 3:50 AM

"Dear RavenAvi,

Your account on Team-BHP has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 124.17.113.84"

Tracked the IP to Beijing, China.
RavenAvi is offline   Reply With Quote
Old 27th November 2011, 10:48   #21
BHPian
 
Join Date: Jun 2011
Location: Ahmedabad
Posts: 318
Thanked: 166 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

Similar thing here. Reproducing the email below:

Quote:
Subject: Account on Team-BHP locked out
From: "Team-BHP" <webmaster@team-bhp.com> Sun, 27 Nov 2011 03:46:52
To: You

Dear RadiantKarma,

Your account on Team-BHP has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 80.65.169.42

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:
Team-BHP - Lost Password Recovery Form

All the best,
Team-BHP
What's up? Is the above a genuine message or has someone sneaked into webmaster's account to send prank mails?!

Request mods to look into this and clarify.
RadiantKarma is offline   Reply With Quote
Old 27th November 2011, 11:00   #22
BHPian
 
better4worse's Avatar
 
Join Date: May 2007
Location: New Delhi
Posts: 302
Thanked: 2 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

I got one such email too yesterday ! Somebody tried to hack my password from Latvia and possibly bring our favorite portal down I have a questions here, how did they manage to get hold of our usernames in the first place ? Is the team-bhp database secure enough ? I am curious as atleast I haven't opened team-bhp portal with a login from anywhere but my super secure office laptop(i.e. if my memory serves me right !). This is some food for thought, hoping Rush and team are working to get around this.

Last edited by better4worse : 27th November 2011 at 11:09.
better4worse is offline   Reply With Quote
Old 27th November 2011, 11:13   #23
BHPian
 
guyfrmblr's Avatar
 
Join Date: Aug 2011
Location: Boston
Posts: 939
Thanked: 1,918 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

Got a lockout mail with this IP : 95.82.105.2
guyfrmblr is offline   Reply With Quote
Old 27th November 2011, 11:22   #24
Senior - BHPian
 
Rahulkool's Avatar
 
Join Date: Oct 2007
Location: Chennai
Posts: 1,250
Thanked: 484 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

Even i have got 2 of such emails yesterday night. Ips are

87.105.154.186
61.153.219.245
Rahulkool is offline   Reply With Quote
Old 27th November 2011, 11:25   #25
Distinguished - BHPian
 
RavenAvi's Avatar
 
Join Date: Jun 2011
Location: Flying Around
Posts: 5,090
Thanked: 25,427 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

GTO posted a thread yesterday afternoon that the servers will be down from 1 AM for awhile for maintenance and to iron out bugs. Maybe this was a part of this whole process, including a server update or something.

Maybe the webmasters were testing some sort of hack-proof program on all T-BHP member accounts from different IPs en-masse, to check how secure they all were. That would explain the 5 attempts from each account to log in.

Also the timing of the emails sent makes me suspect the above - RadiantKarma got it at 3:46 AM, RavenAvi (me) got it at 3:50 AM.

All T-BHP members might want to check their emails for similar T-BHP emails.
RavenAvi is offline   Reply With Quote
Old 27th November 2011, 11:40   #26
Senior - BHPian
 
Raccoon's Avatar
 
Join Date: Jan 2008
Location: Poona
Posts: 1,832
Thanked: 105 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

Just opened my mail to see 11 such mails!

Opened 3-4 of them, and ip of all seem different. Latest ip is 89.28.113.7 (Republic of Moldova)!!
Raccoon is offline   Reply With Quote
Old 27th November 2011, 12:39   #27
BHPian
 
Join Date: Apr 2010
Location: Chennai
Posts: 89
Thanked: 45 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

Looks like I am not the only one. Received 2 emails in half hour yesterday from the same IP [122.72.0.2], tracking to Australia.
thenomad is offline   Reply With Quote
Old 27th November 2011, 13:24   #28
BHPian
 
DueLLeR's Avatar
 
Join Date: May 2005
Location: Vashi / Navi Mumbai
Posts: 190
Thanked: 61 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

Got an account lock out from 80.233.211.132 (Latvia) at 3.16 am.
DueLLeR is offline   Reply With Quote
Old 27th November 2011, 13:24   #29
BHPian
 
prateekm's Avatar
 
Join Date: Nov 2009
Location: Mumbai & BLR
Posts: 755
Thanked: 307 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

I guess this isn't a hacking attempt by someone since it's not possible to get the email id's with which your TBHP ID is registered unless there is a vulnerability in VBulletin and the hacker can access the database. Looks like some testing by the support team to me, though to be on a safer side, do change your password. Passwords stored in the DB are generally encrypted and salted, so there is no chance of hackers decoding your password even if they can access the database.

Last edited by prateekm : 27th November 2011 at 13:42.
prateekm is offline   Reply With Quote
Old 27th November 2011, 13:31   #30
Team-BHP Support
 
tsk1979's Avatar
 
Join Date: Feb 2005
Location: New Delhi
Posts: 22,852
Thanked: 15,407 Times
Default re: Email saying Team-BHP Account Locked? Don't worry - see pg 3

Guys please do not use browser to store your password in unencrypted form. A malicious site can read browser information, esp if your PC is compromised.
As for team BHP password, its easy to make tough passwords to crack.

For example, if you love the song, for whom the bells toll

You can make a password like
4whomTbellsT011

You will remember this password, but its a hard nut to crack by brute force.

If you are using an unfamiliar computer, is https://www.team-bhp.com/forum while logging in instead of http which is prone to man in the middle attack
tsk1979 is offline   Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search


Similar Threads
Thread Thread Starter Forum Replies Last Post
Team-Bhp flooding your email? Solution posted here! Sahil Shifting gears 29 22nd August 2007 10:12


All times are GMT +5.5. The time now is 14:17.

Copyright 2000 - 2017, Team-BHP.com
Proudly powered by E2E Networks