Menu

Main Menu
Talk Get Daily Search

Member's Online

    User Name
    Password

    Einstein2 is still around

    Reply
    Page 1 of 2 | 1   2   | Next
    brendan | # 1 | 2007-08-10, 18:03 | Report

    i just to a private message from einstein2 at 1:08 today.

    just figured i would report his continued harassment.

    Edit | Forward | Quote | Quick Reply | Thanks

     
    gotanga | # 2 | 2007-08-10, 22:04 | Report

    Is it a problem? einstein2 sent me a 'hello' PM soon after i registered.

    Edit | Forward | Quote | Quick Reply | Thanks

     
    Rocketman | # 3 | 2007-08-10, 22:20 | Report

    Yes, it is a problem as einstein2 appears to be an account use in conjunction with the recent hacking attacks against this site. He has been messaging people with a message regarding Buddhism or some such that contains a link to a site which attempts to install malware on your PC. There has simultaneously been an attempt to brute force passwords coming from a box hosted at an isp called theplanet.com with the IP 74.53.243.34

    I believe several people have reported the abuse to theplanet and I think Reggie the ITT server admin blocked that IP. This latest report suggests that he may have forgotten to ban/delete the account or that the perpetrator of these attacks was able to recreate the account.

    Edit | Forward | Quote | Quick Reply | Thanks

     
    bunanson | # 4 | 2007-08-11, 09:22 | Report

    I got hit too, an email that someone tried to hack into.... same ip address. I also got this einstein2 &^%&*"hello" PM. I googled the ip address, and that is what I found: Cowan and iaudiophile.net (same forum?) had the problem for several days already http://www.cowonamerica.com/forums/s...ad.php?t=12987,
    __________________________________________________ _____
    OrgName: ThePlanet.com Internet Services, Inc.
    OrgID: TPCM
    Address: 1333 North Stemmons Freeway
    Address: Suite 110
    City: Dallas
    StateProv: TX
    PostalCode: 75207
    Country: US

    ReferralServer: rwhois://rwhois.theplanet.com:4321

    NetRange: 74.52.0.0 - 74.54.255.255
    CIDR: 74.52.0.0/15, 74.54.0.0/16
    NetName: NETBLK-THEPLANET-BLK-14
    NetHandle: NET-74-52-0-0-1
    Parent: NET-74-0-0-0-0
    NetType: Direct Allocation
    NameServer: NS1.THEPLANET.COM
    NameServer: NS2.THEPLANET.COM
    Comment:
    RegDate: 2006-02-17
    Updated: 2007-07-11

    RTechHandle: PP46-ARIN
    RTechName: Pathos, Peter
    RTechPhone: +1-214-782-7800
    RTechEmail: admins@theplanet.com

    OrgAbuseHandle: ABUSE271-ARIN
    OrgAbuseName: Abuse
    OrgAbusePhone: +1-214-782-7802
    OrgAbuseEmail: abuse@theplanet.com

    OrgNOCHandle: TECHN33-ARIN
    OrgNOCName: Technical Support
    OrgNOCPhone: +1-214-782-7800
    OrgNOCEmail: admins@theplanet.com

    __________________________________________________ __


    and now that reminded me about a spammer got 9 yrs jail time, did he appeal or what happened?
    http://news.bbc.co.uk/2/hi/americas/4426949.stm

    bun

    Edit | Forward | Quote | Quick Reply | Thanks

     
    Bree | # 5 | 2007-08-11, 09:30 | Report

    I got hit by Einstien2 as well....

    Bloody Mongrel.

    Edit | Forward | Quote | Quick Reply | Thanks

     
    andymulhearn | # 6 | 2007-08-11, 10:07 | Report

    I got the account locked message as well a couple of days back. I deleted it though so can't check the host address.

    Edit | Forward | Quote | Quick Reply | Thanks

     
    Pete From PA | # 7 | 2007-08-11, 13:29 | Report

    I got a PM from him too, just ignored it.

    Edit | Forward | Quote | Quick Reply | Thanks

     
    WirelessAndy | # 8 | 2007-08-11, 15:18 | Report

    Ditto. I want my 30 seconds back.

    Edit | Forward | Quote | Quick Reply | Thanks

     
    Rocketman | # 9 | 2007-08-12, 06:37 | Report

    I received one today around 1 am. This has been going on for at least a couple days. Honestly, how long does it take for an admin to ban this account and block his ip range?

    Edit | Forward | Quote | Quick Reply | Thanks

     
    geneven | # 10 | 2007-08-12, 07:03 | Report

    I got one as well and deleted it on general principles.

    Edit | Forward | Quote | Quick Reply | Thanks

     
    Page 1 of 2 | 1   2   | Next
vBulletin® Version 3.8.8
Normal Logout