Someone tried hacking into my Paypal

taktikz

WF Veteran
Oct 22, 2008
1,480
13
0
Tampa, FL
Twice.
With the following IP Address: 213.6.80.131

All I know is that it's in Palestinian Territories and the ISP is PalTel.

Would love to figure who this fucker is. Emailed the ISP already...

Any other ideas?
 


Do a port scan and see if there are any open ports that you can do some ub3r h4ck!ng skillz with (did I do that right?)

More importantly, he tried to hacked your paypal twice... I would check for a keylogger on your computer if I were you.
 
Don't bother wasting your time dude. Check your PC and change your passes.
 
Some websites have ads that can load up Trojans with JavaScript to act like keyloggers. Don't have any tabs open when logging into PayPal which have ads on them.

Get a decent Internet Security suite or Antivirus like Kaspersky and do some deep scans with Heuristics and see what turns up.
 
A sound security habit is to change your password regularly, say monthly. Don't wait these kind of threats to happen before you institute measures.
 
A sound security habit is to change your password regularly, say monthly. Don't wait these kind of threats to happen before you institute measures.
It doesn't matter. It's not like hackers hack and then take your password and save it for later. Once they capitalize and get your password they use it right away. Changing passwords is useless. Once a hacker attains your password you're fucked. Don't make it a generic one either. Make it like kjd7(*&3--=*&JHgh../987^&*(*&^
 
I like Rev. Exchange because there's no fees, and it's safe because it's a bank. No funny stuff or Paypal money grab bullshit.

It's available to the US only though.
 
I use "password" as my password on everything. Nobody ever guesses it.

had a server get cracked like this once
setup a dev server so our filipino outsource guys could login, and they had trouble typing my old root password ('sxt7,!#rsQQbfp!') so i let them change it to "whatever you want". they chose "p455w0rd", and i shrugged it off.
6 hours later, i got an email from amazon saying my server had been comprimised and was making a ton of requests to SSH into other servers.
i logged in to take a look, and found a big passwords.txt full of 20k common combinations of common shit, and a tiny script that continually tried passwords on random IPs until it found one that works. grepped the passwords.txt to find my password, and voila, it was #8 on the list to try. *sighs*
 
Ok. Weird shit.. This dude shows up on my stats for a couple of my sites... One of the referring links is bing.com with the following search query: ip:127.0.0.1 "money" and ip:127.0.0.1 wordpress

127.0.0.1 being my sites IP address...

Wtf?