Account hacking attempt?

[yavuz]

It seems some kind of lame person is trying to hack accounts on this forum?

I got this email on 25.08.2013 - 05:44:15

Dear yavuz,

This mail was sent because the 'forgot password' function has been applied to your account. To set a new password click the following link:

[password-reset-link-here]

IP: 41.104.11.105

Username: yavuz

Regards,
Sonsivri.To.

and I traced that IP and found the attacker is from Algeria



who ever you are, you're funny man!     

[metal]

May be someone who knows you from Algeria?

[yavuz]

I don't think so. No one knows me from Algeria, nor I know..

[SONSiVRi]

You just need to enter username in to "Forgot password". The system will dispatch email you quoted above. The system won't display email address. There is nothing to worry about.

[yavuz]

yep, thanks for the info.

I got another one btw. This time from 31.50.118.120 (Glasgow, UK). Obviously through a VPN.

(ne kadar boş adam var ya) 

[LzEn]

I have received the same email today

This mail was sent because the 'forgot password' function has been applied to your account. To set a new password click the following link:

[password-reset-link-here]

IP: 173.246.12.26

IP Location:   Canada Canada Montreal Electronic Box

[pickit2]

You just need to enter username in to "Forgot password". The system will dispatch email you quoted above. The system won't display email address. There is nothing to worry about.

so anybody could start a system email, so someone sent a spoof reset to your email address, 173.246.12.26 is not from sonsivri site.

so question is why? (your user public details, in forum are not seen by members who have not reached active status, to be able to see your contact details)
Also so, you have the skill? to see IP from where message is from(if not spoofed)
but not to see where [password-reset-link-here] leads to, maybe there is answer.

[Wilksey]

I don't see the point in a "hacker" hitting the lost password function, surely they don't think it's going to pop up after you press the button saying "your password is: underpants29" or something to that effect, unless they have already gained access to your emails, then they would surely log in and delete the email in question.

[Thiru09]

Today I got the password reset mail !!!!!!!!!!!!

Code:

Dear Thiru09,

This mail was sent because the 'forgot password' function has been applied to your account. To set a new password click the following link:

http://www.sonsivri.to/forum/index.php?action=reminder;sa=setpassword;u=7421;code=0e2fac188a

IP: 195.31.151.162

Username: Thiru09

Regards,
Sonsivri.To.

IP:           195.31.151.162
Decimal:   3273627554
Hostname:   host162-151-static.31-195-b.business.telecomitalia.it
ISP:           Telecom Italia
Organization:   Telecom Italia
Services:   None detected
Type:   Broadband
Assignment:   Static IP

[pickit2]

I know who this ƒucktard his, he is a sad muted member, and will be banned soon.
His actions have been reported to Sonsivri

it was not a account hacking as such, he just triggered the forgotten password.

You have his IP ping the ƒucker...