I keep getting the automated email about password resets.

Buck

Got this e-mail this morning.

Dear Buck,

Someone has tried to log into your account on boards.ie with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 109.76.52.221

All the best,
boards.ie

Firstly, why would anyone want to hack my account?

Secondly, can I find out who from the IP address?

Thanks all.

D

In my email inbox I keep getting the:

Hello D,

You have requested to reset your password for your boards.ie account. To do so please Click Here.

However I have not asked for a password reset and have no trouble logging in. I have received two such emails within the last week or so. I have not responded to either. Is there any particular reason or is someone trying to access my account?

Edit: The link within the email starts with: https://www.boards.ie/auth/passwordreset?u=
so it looks legit.

Spear

Two reports at the same time maybe a coincidence, but I'll have the devs give it a look over and make sure.

Boards.ie: Danny

Ok, two separate issues here.


1) Buck, this is just a security notice to let you know that somebody is trying to log in under your account. It could be you, it could be somebody else. We have no way of knowing who it is, and neither do you. If the user persists longer trying to log in we'll block their IP address from Boards for 10 minute periods. It's not really hacking if they're trying to guess your password, it's just down to luck. Make sure you've a strong password and make sure it's not the same as your email address password and you'll be fine. If the abuse persists you can contact the ISP of the offender (e.g. the abuse email address at http://whois.sc/109.76.52.221 is spam.ie@vodafone.com).

2) D, anybody who knows your username or email address can request a password reset and we will send the account holder an email. If you didn't request it then the only way somebody can actually use the form is to have access to your email account which I assume they don't. The security token needed to reset your password expires after 24 hours, so feel free to ignore the mail.

Danny

D

Thanks, my google account is pretty safe but I'm off to install the authenticator.

Buck

Thanks, changed my passwords just in case