Unsuccessful login attempt to Mac Forums notification

[Rod]

A few days ago I received an email notification from Apple iOS MacOS Help | Fix Mac iPhone iPad | Buying Tips | Mac-Forums (its a mouthful isn't it?) See Below;

"Dear Rod Sprague,

Someone has tried to log into your account on Apple iOS MacOS Help | Fix Mac iPhone iPad | Buying Tips | Mac-Forums with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 192.88.134.5

All the best,
Apple iOS MacOS Help | Fix Mac iPhone iPad | Buying Tips | Mac-Forums"

I looked up the IP address on dbip an online Geolocation site in the US and found; 192.88.134.5 or cloudproxy11005.sucuri.net is an IPv4 address owned by Sucuri and located in Menifee, California, United States.

This doesn't tell me a lot other than, that is the IP address allocated by the users ISP, however it certainly reduces the possibility that it was anyone I know or who lives nearby.

I only just changed my password for Mac Forums so I'm not too concerned but it is the first such email I have received for MF.

BUT, and I just made the connection, although it took me a while to find it I received this notification while trying to login to MF's website on 12th May and this is also from Sucuri.

Can anyone shine any light on this?

 

[pigoo3]

I looked up the IP address on dbip an online Geolocation site in the US and found; 192.88.134.5 or cloudproxy11005.sucuri.net is an IPv4 address owned by Sucuri and located in Menifee, California, United States.

Can anyone shine any light on this?

That's exactly the way it's supposed to be.

As to why was someone trying to login via your account...who knows...could happen to any of us. They tried & failed...that's one reason why we have passwords & change them every 120 days.

- Nick

 

[Rod]

I was a bit puzzled by the Securi Access Denied notification as it didn’t seem to mean much at the time it wasn’t until I traced the IP address that I made the connection between the two. I still don’t really know what it means.


Sent from my iPad using Mac-Forums

 

[Cr00zng]

Interesting and just some wild guesses...

Did you restrict your account access to your IP address of 125.167.99.231? If not...

The hosting company's firework and/or your forum settings blocks IP addresses, after five invalid login attempt.

As for why people keep trying to use your account, well... There had been so many account databases exposed, I am pretty certain that everyone has a few account stolen here and there during the last ten years or so. You've changed your password and the firewall/your setting did what it suppose to. I wouldn't worry about it...

I run couple of WordPress site and get notification for blocked hosts/IPs. I only worry, when there are 40-50 of them; it's an early indication that a WordPress security patch release is imminent...