hey i got this today

[1stpfloyd]

Your account on Digital Video Forums has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 70.86.138.114

[admin]

Interesting ... has this happened to anyone else?

[Chewy]

NetRange: 70.84.0.0 - 70.87.255.255

ThePlanet.com Internet Services

The Planet now serves more than 22,000 customers and powers more than 2.8 million Web sites.

[admin]

I checked the IP too - this forum is hosted using The Planet too. A coincidence? Or someone using someone else's server to try and hack into the forum? I checked the logs and found about 500 attempts to login by this IP, so I've blocked it (the forum software should have blocked it too).

[locoeng]

Domain Name: THEPLANET.COM
Registrar: THE PLANET INTERNET SERVICES, INC.
Whois Server: whois.theplanet.com
Referral URL: http://www.theplanet.com
Name Server: NS1.THEPLANET.COM
Name Server: NS2.THEPLANET.COM
Status: clientTransferProhibited
Status: clientUpdateProhibited
Status: clientDeleteProhibited
Updated Date: 30-aug-2006
Creation Date: 11-mar-1999
Expiration Date: 11-mar-2008

TraceRoute to 70.86.138.114 [72.8a.5646.static.theplanet.com]

[admin]

Got a couple of emails from users who also received the "account locked" email. I guess the forum security features did its job, by locking these accounts after 5 attempts and preventing further login attempts.

[a2j3]

@admin as a matter of fact Ive had that exact same problem with the IP address showing up as the following. But thanks to DD they did not get in here using my account that I'm aware of.

70.86.138.114
Record Type: IP Address

OrgName: ThePlanet.com Internet Services, Inc.
OrgID: TPCM
Address: 1333 North Stemmons Freeway
Address: Suite 110
City: Dallas
StateProv: TX
PostalCode: 75207
Country: US

ReferralServer: rwhois://rwhois.theplanet.com:4321

NetRange: 70.84.0.0 - 70.87.255.255
CIDR: 70.84.0.0/14
NetName: NETBLK-THEPLANET-BLK-13
NetHandle: NET-70-84-0-0-1
Parent: NET-70-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.THEPLANET.COM
NameServer: NS2.THEPLANET.COM
Comment:
RegDate: 2004-07-29
Updated: 2006-02-17

RTechHandle: PP46-ARIN
RTechName: Pathos, Peter
RTechPhone: +1-214-782-7800
RTechEmail: admins@theplanet.com

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-214-782-7802
OrgAbuseEmail: abuse@theplanet.com

OrgNOCHandle: TECHN33-ARIN
OrgNOCName: Technical Support
OrgNOCPhone: +1-214-782-7800
OrgNOCEmail: admins@theplanet.com

OrgTechHandle: TECHN33-ARIN
OrgTechName: Technical Support
OrgTechPhone: +1-214-782-7800
OrgTechEmail: admins@theplanet.com

[admin]

a2j3: Was this recent, or was it from a few weeks ago?

[a2j3]

@Admin. sorry 4 the delayed response, but yes this was a few weeks ago. Ide like to take this individual to the desert and let he/she know what I think of the trouble they cause. Ive had other accounts attacked as well recently.

[admin]

A few weeks ago, in another thread, I posted that I managed to change the way the list of members page is shown so that only registered/confirmed members can see the page ... what was happening before was that it was open to the public, and people can write a script to attack each username one by one - because your username was at the top of the list, that's why it was attacked so frequently. That was maybe 3 weeks ago - if you've had the same attack again in the last 2 weeks, then let me know and I'll investigate again.

[a2j3]

@admin, I haven't had anymore problems with my account here since then. Seems to be good to go here. Thanks again admin.