Is this something I need to be concerned about?

[Freight Train]

Hi,
   Been receiving these notifications via e-mail of failed attempts in logging into my account here on the Railwire :

(Hello Freight Train,
We have detected a failed login attempt on your account.

Matched forum members with same ip address:
Freight Train


IP address of the failed login attempt: 70.190.236.253)

This one was from around 12:30 am this morning. Problem is I work nights from 10:00pm to 7:00am so this failed attempt couldn't of been from me. Other than changing my password is their anything else I can do to prevent who ever it is from hacking into my account??
                                                                               Freight Train ( Rick)

[John]

The IP appears to come from Arizona

http://ip-address-lookup-v4.com/lookup.php?host=ip-address-lookup-v4.com&ip=70.190.236.253&x=67&y=25

[tom mann]

Rick, since that IP address is yours, could someone else be using your computer during this time and trying to log on?  Alternatively, another computer on your network could also be trying to log in (like if you have multiple computers connected to a router).

[peteski]

Curious... I have mistyped my password few times but I don't remember a warning email. How many failed logins in a row does it take to trigger that email?

[tom mann]

5

[Freight Train]

Tom,
   The only other person that shares this pc is my wife and she wouldn't be trying to login here on Railwire. And if for some reason she did want to get in she would of asked me the login info. I get 3 to 5 of those login failures a day?? I checked the link you sent though I do live in Arizona I do not however live in Scottsdale unless that has something to do with Cox my service providers location?  i just find it really strange I'm getting all these failed e-mail alerts???
                                                                                        Rick

[JoeW]

Hi Gang
I also have been receiving login failure notices.  I know where all my devices are and I haven't tried going on to Railwire for the last couple of days.   Anyway let this be a heads up.
JoeW

[nkalanaga]

If you're on cable internet, like I am with Suddenlink, they assign your modem an IP address out of a pool assigned to them.  In that case, your apparent location would be wherever their server was, not necessarily where you are.

[mighalpern]

I too have just received this notice
4 times yesterday

that IP address is 24.5.213.33

any thoughts

I am the only one using railwire

[tom mann]

I too have just received this notice
4 times yesterday

that IP address is 24.5.213.33

any thoughts

I am the only one using railwire

That is the IP address you currently are using.  I'm not sure why a few of you see this.  I'll keep digging into it.

[johnb]

To find out what your IP is, go to http://whatismyip.com

If you want to find out what it is that is NSFW, goto http://moanmyip.com

[gnfan]

I received a couple of these messages within an hour of one another.  IP address the messages report is: 73.221.216.113. My IP is 71.35.96.63 (both of which may be in Centurylink's domain).  Messages purport to be coming from Railwire, but the address is admin@precision7.com (no idea if that is legitimate or not).

As others have asked, should I be worried about this?

Mike

[tom mann]

I received a couple of these messages within an hour of one another.  IP address the messages report is: 73.221.216.113. My IP is 71.35.96.63 (both of which may be in Centurylink's domain).  Messages purport to be coming from Railwire, but the address is admin@precision7.com (no idea if that is legitimate or not).

As others have asked, should I be worried about this?

Mike

A user with the name of Tom Todd has came from this ip, with the email gntrains1@yahoo.com. 

[gnfan]

A user with the name of Tom Todd has came from this ip, with the email gntrains1@yahoo.com.

"Curiouser and curiouser".  I note that my username is "gnfan" and there is a "GN Fan" on railwire.  The error messages note this user name - compared to mine - as the suspicious activity.  Are similar usernames a trigger for these alerts?

Thanks for looking into this.

Mike

[tom mann]

It also shows that you logged in here with the .113 IP address. Does the email address look familiar to you?