Not a happy bunny :(

[richamies]

Somebody today tried changing the password on my E-mail account at Yahoo. I have their IP number as the new password is emailed to another account. Any ideas what I should do about this? The IP goes back to Netscape Online, I can't think of anyone I know who uses it, and for them to change my password they have to know my date of birth, postcode and the answer to my secret question. Any thoughts?

[Dave_H]

Rich
Start raising hell.
I'm sure you have already contacted Yahoo.
Try using this page to find the ISP of the offender, you will be able to find the network administator of that ISP and an E-mail address for that person. http://advice.networkice.com/advice/Support/KB/q000016/default.htm
note- this link is to a site with Black-Ice, if you can't get in, post that jerks IP and someone will track-it down for you.
On second thought, maybe you should post the IP address by "mistake" HeHeHe.
Hope this helps Rich, this is a pretty serious thing this person is doing, hopefully you will be able to take care of it quick.
Dave

[Dave_H]

Rich,
I'm not real sure how it goes if the guy has a dial-up with an assigned IP. I think you have to give the time so they can find who was using that IP at that time.
Dave

[GMAGDNA]

Post it here and all additional info you have and I'll track him down for ya.

[richamies]

Ok this is what Yahoo sent to my othe email account...

=============================================
Date: Fri, 21 Jan 2000 08:54:27 -0800 (PST)
From: my-login-request@yahoo-inc.com
Subject: Yahoo! new password request



Your Yahoo! ID is: richamies

You recently requested a new password for this account. You don't need to
do anything, this message is simply a reminder and a notification to protect
the security of your account.You recently requested a new password for your
Yahoo! account. A new password has been generated.


Please note: your new password may take a while to activate, if it doesn't
work on your first try, please try it again later.

DO NOT REPLY TO THIS MESSAGE. For further help or to contact support, see http://help.yahoo.com/help/edit/

How to Change Your Password
---------------------------
You can change your password at any time using the Yahoo! Account Information
pages. After you sign in to one of Yahoo!'s Personalized Services, look for the
Account Info link.

Where to find the Account Info link
-----------------------------------
Yahoo! Mail - Click Options in the left column, then you'll see it
Yahoo! Chat - It's on the top right corner of the front page of chat
My Yahoo! - It's on the top right corner of your page
Yahoo! Calendar - Click Options on the right side of the grey bar, then you'll see it
Yahoo! Finance - Click Customize on the right side of the blue bar, then you'll see it

Or go to Acct Info directly: http://edit.my.yahoo.com/config/eval_profile


Very Important: Check the date on your computer.
If the date shows a date before 1 Jan 1970 or after
31st Dec 1999, then the cookie that we set when you
log in gets forgotten by the browser. To correct this, set
the correct time and date on your computer.
This is a common problem.

[62.125.128.166]

=============================================


so what do I do now? I presume the IP at the bottom of the page is the culprits so should I get all my friends to ping the IP address? Or is that a bad idea? http://www.sysopt.com/forum/wink.gif

*EDIT*

Deleted new password http://www.sysopt.com/forum/biggrin.gif <G>

[This message has been edited by richamies (edited 01-21-2000).]

[Prospero]

The Data in Network Solutions' WHOIS database is provided by Network
Solutions for information purposes, and to assist persons in obtaining
information about or related to a domain name registration record.
Network Solutions does not guarantee its accuracy. By submitting a
WHOIS query, you agree that you will use this Data only for lawful
purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail
(spam); or (2) enable high volume, automated, electronic processes
that apply to Network Solutions (or its systems). Network Solutions
reserves the right to modify these terms at any time. By submitting
this query, you agree to abide by this policy.

Registrant:
UUNET PIPEX (PIPEX-DOM)
332 Cambridge Science Park
Cambridge, Cambridgeshire CB4 4BZ
UK

Domain Name: PIPEX.NET

Administrative Contact:
Hostmaster (HOS133-ORG) hostmaster@UUNET.PIPEX.COM
+44 (0)1223 250122
Fax- +44 (0)1223 250133
Technical Contact, Zone Contact:
Corporate Support (PIP-NOC) support@UK.UU.NET
+44 1223 250122
Fax- - +44 1223 250133

Record last updated on 29-Dec-1999.
Record created on 13-Jun-1995.
Database last updated on 21-Jan-2000 15:24:23 EST.

Domain servers in listed order:

NS0-P.DNS.PIPEX.NET 158.43.129.80
NS1-P.DNS.PIPEX.NET 158.43.193.80

[richamies]

Why does your search say Pipex(an ISP in UK) and mien brings up Netscape Online(another ISP in UK)?

[BBA]

In the meantime, how about requesting another password while this one is still in the making? Have it sent to your real address and change your secret word.

[richamies]

Doen that, been back in my email account since I found out what happened. The password is sent over straight away. Thanks for the thoughts though http://www.sysopt.com/forum/biggrin.gif

[Prospero]

When I search, it shows destination host unreachable. I am assuming this means it is a dynamic pool ip, and I am hitting the last node currently active. Also, I used the program neotrace to do this.

[richamies]

I used the IP tracer on SubSeven, but the same results come from BlackIce's web page.

[Dave_H]

Here are some more addresses for people to yell at.


62.125.128.166

% Rights restricted by copyright. See http://www.ripe.net/ripencc/pub-services/db/copyright.html

inetnum: 62.124.0.0 - 62.126.255.255
netname: UK-PIPEX-990714
descr: UUNET PIPEX (Formerly PIPEX)
descr: PROVIDER
country: GB
admin-c: SCH4-RIPE
tech-c: SB855-RIPE
tech-c: TB118
status: ALLOCATED PA
remarks: Please send abuse notification to abuse@uk.uu.net
notify: routing@uk.uu.net
mnt-by: RIPE-NCC-HM-MNT
changed: hostmaster@ripe.net 19990714
changed: hostmaster@ripe.net 19991004
source: RIPE

person: Stephen C Hagger
address: UUNET UK (Formerly PIPEX)
address: Internet House
address: 332 Science Park
address: Milton Road
address: Cambridge
address: CB4 4BZ
address: England, UK
phone: +44 1223 250100
fax-no: +44 1223 250101
e-mail: steveh@uk.uu.net
nic-hdl: SCH4-RIPE
mnt-by: AS1849-MNT
changed: tonyb@uk.uu.net 19990315
source: RIPE

person: Stephen Burley
address: UUNET UK
address: Internet House
address: 332 Science Park
address: Cambridge
address: CB4 4BZ
address: UK
phone: +44 1223 250100
fax-no: +44 1223 250300
e-mail: stephenb@uk.uu.net
nic-hdl: SB855-RIPE
mnt-by: AS1849-MNT
changed: samc@uk.uu.net 19970909
source: RIPE

person: Tony Barber
address: UUNET UK (Formerly PIPEX)
address: Internet House
address: 332 Science Park
address: Milton Road
address: Cambridge
address: CB4 4BZ
address: England, UK
phone: +44 1223 250100
fax-no: +44 1223 250101
e-mail: tonyb@uk.uu.net
nic-hdl: TB118
remarks: None
notify: tonyb@uk.uu.net
mnt-by: AS1849-MNT
changed: tonyb@uk.uu.net 19980326
source: RIPE

[richamies]

Thanks a lot guy's I'll get onto it when I get up tomorrow(looks like it will be afternoon now - its 4.22am here!)

[CMonster]

Did Yahoo verify that they actually sent you that email notification?

[richamies]

Havent sidcussed it with Yahoo but It's from their addy, and in the exact same style. I changed my password after the new one was set up, and it sent me the same email but with the new password on it. I am quite happy the email confirmation was authentic.

[jad1097]

I wonder how long this person has been reading your mail. Guess this is a good time to change all my passwords.

[alpha]

Rich,
I suppose I won't be able to mail you for a while...
Sorry about the news http://www.sysopt.com/forum/frown.gif
Hope it all turns out well.

[richamies]

I think some of you have read this wrongly. Nobody can gain access to my yahoo account. If they try and get a new password issued, it emails a new pasword to a different account which they cannot see. The account is still secure, and yahoo doesn't tell them which email account the password has been sent to. As they can't see the new password, they cannot gain access to the account.

[pickel]

Changed my password today. Since I and my daughter share this mailbox, Get one step ahead on the hackers. Some people have alot os b-lls the do stuff like that. Maybe he might have a house on him!!!!

the pickel