RIBNET attack?

C2 RIBS · 20 December 2010, 06:43

I have received three e mails stating someone tried numerous times to access my RIBnet account and the IP addresses were not mine. Has anyone else been subject to this. The attempts were all around 0630 when I was out this morning

Just looked further at e mails and the e mails state that more than 5 attempts with the wrong password and this was three e mails at different times so at least 15 attempts

chewy · 20 December 2010, 08:04

Have you still got the IP address?
Isn't it possible to trace an IP address, thats if it isn't a public computer?

John Kennett · 20 December 2010, 09:28

Ian, please forward the emails to me and I'll have a look at them.

C2 RIBS · 20 December 2010, 10:30

Chewy, yes the IP addresses came with the notifications, I have sent them to John to look at.
I did quickly search on and it came back as a spammer IP I think

John Kennett · 21 December 2010, 07:38

Yes, definitely looks like a spammer trying it on. As far as I know this was an isolated instance but please let me know if anyone else gets one of these messages.

Also if anyone has an obvious or easily guessed password please update it to something a bit more cryptic.

biffer · 21 December 2010, 07:50

Quote:

Originally Posted by John Kennett

Yes, definitely looks like a spammer trying it on. As far as I know this was an isolated instance but please let me know if anyone else gets one of these messages.

Also if anyone has an obvious or easily guessed password please update it to something a bit more cryptic.

i've only just got used to my 123456

willk · 21 December 2010, 08:04

Quote:

Originally Posted by John Kennett

Also if anyone has an obvious or easily guessed password

The problem there Boss, is does a RIBtwit with the password 1234 actually know that it's a weak password.
Very common (therefore bad) passwords:

123456
password
12345678
qwerty
abc123
111111
monkey! What were you thinking?

more here

My password is very weak/bad, but I thought "how much worse could the posts be if someone else made them?"

biffer · 21 December 2010, 08:09

Quote:

Originally Posted by willk

The problem there Boss, is does a RIBtwit with the password 1234 actually know that it's a weak password.
Very common (therefore bad) passwords:

123456
password
12345678
qwerty
abc123
111111
monkey! What were you thinking?

more here

My password is very weak/bad, but I thought "how much worse could the posts be if someone else made them?"

you forgot
open
itsme
opensezme

willk · 21 December 2010, 08:32

Quote:

Originally Posted by biffer

you forgot
open
itsme
opensezme

Sorry Biff, didn't spot your post there

Pablo · 23 December 2010, 09:55

Is "letmein" no good either then

John Kennett · 23 December 2010, 10:36

No, not particularly!

kitten · 23 December 2010, 10:40

Cool mines not in the top 500. If they are supposed to be secret how do you do a top 500 anyway

Poly · 23 December 2010, 11:11

Quote:

Originally Posted by kitten

Cool mines not in the top 500. If they are supposed to be secret how do you do a top 500 anyway

Hack them using a brute force attack then analyse what people actually used.

I think the "bigger" problem is people who use the same password and email address everywhere. So if you are abc.def@hotmail.com and use even a very secure password on every site then if you register at www.myhonestlookingsite.com you rely on "me" keeping your details secret and not telling anyone. I'd guess for a large proportion of the population if myhonestlookingsite.com actually is not so honest then I have your credentials for paypal, hotmail, facebook, amazon, ebay etc... if I get your email account open then I can probably get most other username / password reminders send to me!

NEIL

gotchiguy · 03 January 2011, 18:54

Do YOU have access to the Ribnet database then?

willk · 03 January 2011, 19:11

Quote:

Originally Posted by gotchiguy

Ribnet database

LOL -there are only ten REAL people in there, i.e. The Inflatablati Council

The rest are mostly Duplicates and Replicates. You are definitely one and there's something Fishy about me too...

gotchiguy · 03 January 2011, 19:13

Quote:

Originally Posted by willk

LOL -there are only ten REAL people in there, i.e. The Inflatablati Council

The rest are mostly Duplicates and Replicates. You are definitely one and there's something Fishy about me too...

haha how could you guess. Don't count Gotchidad, trust me he's not me

willk · 03 January 2011, 19:23

Quote:

Originally Posted by gotchiguy

Don't count Gotchidad, trust me he's not me

No, you're a bit him...

Devilishly clever, isn't it?

gotchiguy · 03 January 2011, 19:49

Quote:

Originally Posted by willk

you're a bit him...

Quite a BIT less them him actually. The boat sinks with where he is as the lowest place. For me it doesn't change. Actually I'm only 10kg less than him now :Eek: but still it doesn't move when I move around

Quote:

Originally Posted by willk

Devilishly clever, isn't it?

Well who are you then....

willk · 03 January 2011, 20:03

Quote:

Originally Posted by gotchiguy

The boat sinks with where he is as the lowest place.

Tha's cuz Yo an Yo's din buy a redbay whuz toob's fit to tush de wadder wen ee's restin'

Quote:

Originally Posted by gotchiguy

For me it doesn't change.

Wen yo's a growin man, dis goan change

Quote:

Originally Posted by gotchiguy

Well who are you then....

dass an Udder matter

jwalker · 03 January 2011, 20:21

Will, I new there was something fishy about you. Anyway, the mods'll have all the duplicates, triplicates, quads and the rest sussed, the I pee numbers'll let the cats outa the bag. Maybe our pal Mr Polwart could do a recce of the joint and give us the lowdown, only statistical of course... no names.