"Account locked out" e-mail - GW Guru hacker?

I have just had somebody try to infiltrate my account. They werent successful and where locked out. It gave me their ip. Who should I send these details to? (admin, mod)?

So after a busy day, I come home and check my mail to find this in my inbox
Seeing as how my "last visited" time hasn't been reset(from over a day ago), I assume whoever was trying to log into my forum account didn't break my password. Just wondering if anybody else got this and if Inde(or another site admin) can tell if there's been a rash of such attempts lately.

Fyi, game account is untouched and a full system scan turns up nothing.

I got an email saying the following earlier:

"Dear drago34,

Your account on Guild Wars Forums - GW Guru has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 213.98.218.28

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:
http://www.guildwarsguru.com/forum/login.php?do=lostpw

All the best,
Guild Wars Forums - GW Guru"

Anyone else receive this or something similar? Is it just a case of someone using the wrong username... was just wondering.

At least 2 members of our guild have gotten the same message, with the same IP even, so there's a prospective hacker out there trying to brute force guru accounts.

Guru Accounts mean jack shit if they're not premium ones, which most of us didn't bother paying for. ^_^
But sure, it's a problem that needs to be solved. Ban the IP? 213.98.218.28.

Just check whether it's a legitimate mail from gwguru and not a phishing scam first... PM the admin, maybe?

thats...true felix, why would anyone bother -.- its not like creating a new account is hard. ugh.

edit, unless hes attacking only people with char names displayed in the hope of coming across one that uses the same pass ingame.

They do mean something, because most players use the same data to login to guildwars as they do to login to guru. Thats what those guys are hoping for! So if they have your guru info they might also have luck that that is gw login as well

same here:

Hostname: 28.Red-213-98-218.dynamicIP.rima-tde.net
Internetprovider: Internet Access Network of TDE
State: Spain
Town: Barcelona
Region: Cataluna
IP-Adresse: 213.98.218.28

huh well i am curious about where this is gonna lead but.....this is mined ground so il will bow out now. good luck anyways.

RIPE Network Coordination Centre - whos doing it (from amsterdam, not california according to your profile)


how i did that: http://tools.whois.net/whoisbyip/ then entered the ip

Yeah, that's not working. It says that mine is from Amsterdam, too.

http://www.ip-adress.com/whois/213.98.218.28
there is an abuse mailbox...
I suggest you report it there since it seems to leed to a provider

Not saying that some people deserve to be hacked just for this, but that's quite a stupid thing to do.

Could just get a mod to check up the ip and see if its being used by another acount. Someone must have a grudge against you and trying to log onto your acount

Admin are aware and I'm pretty sure there have been some bannings going on.

I would take this opportunity to check your passwords and make sure they're as strong as possible.

They must hold a lot of grudges then as others in this thread have admited to know people who have had the same IP try to get into their account.

I got it also.

I truly hope nobody does that, much less most users. Your Guild Wars PW should NEVER EVER be the same as in any other password, here in guru or anywhere else.

Delete email, giving attention will only encourage more scoundrels to try it