Who's trying to break into my account?

Is anyone else getting responses from iTunes, when you did not send in a request, for help resetting your password. I got several responses, and today I received one that whoever wasn't able to answer my security questions. Someone's really trying to get in.
I sent in a support request to Apple with all pertinent info, including some all caps on the important stuff, but is there anywhere else I should submit a help request? Anything else I should do?

For general advice see Troubleshooting issues with iTunes for Windows updates.
The steps in the second box are a guide to removing everything related to iTunes and then rebuilding it which is often a good starting point unless the symptoms indicate a more specific approach. Review the other boxes and the list of support documents further down page in case one of them applies.
Your library should be unaffected by these steps but there is backup and recovery advice elsewhere in the user tip.
tt2

Similar Messages

Someone's trying to break into server

Hello,
According to my directory service log, someone is trying to break into our server by trying to log in as 'root' and 'admin'. DirectoryServices senses this and delays the failed authentication return.
Okay, how do we backtrace this fellow's IP and where do I get a detailed log of this apparent hacker's attempts?
Thanks!

In my strongly felt opinion, using denyhosts is mostly a bandaid to a problem, rather than properly addressing it.
The one and only time I have used it was when I was battling a situation not entirely under my control. No need to go into those specifics, but it was indeed a bandaid to a situation in which I could not properly secure the server. That has since changed.
I can't state this with enough emphasis: the proper maintenance of server security should totally negate the need for DenyHosts.
1) Shut off ssh access ("remote login") completely if that is an option
1) Shut off root access via ssh entirely
Said quickly: edit /etc/sshd_config and change the section to appear as follows:
# Authentication:
PermitRootLogin no
AllowUsers myserveradmin
where "myserveradmin" is the shortname of a desired user, and should categorically not be "admin" "administrator" "test" or anything else painfully obvious.
Restart ssh.
Furthermore !
3) Shut off password access via ssh completely. Use access by ssh keys only.
See the tutorial by Mike Bombich (of Apple) here:
http://www.bombich.com/mactips/rsync.html
starting with "Before you start: Security Briefing"
Or this article at another excellent resource:
http://www.afp548.com/article.php?story=20040816224717742
note the further information about how to limit commands available via ssh.
Having done this, edit /etc/sshd_config and add:
# To disable tunneled clear text passwords, change to no here!
PasswordAuthentication no
PermitEmptyPasswords no
and restart ssh.
4) Set the shell ("login shell") for every and any account that does not need shell access to your server, to: None
5) Limit ssh access at your firewall, to known-viable IP ranges or even specific static IPs.
Better yet, (while still observing the other steps above) don't allow ssh traffic across your firewall, and setup VPN, and then use ssh access via VPN only.
Do all of this at your own "risk" meaning understand the consequences, the first of which will be a server that is more secure in terms of ssh access. This does little to prevent problematic php (phpBB) or other mismanaged or poor 3rd-party packages and their impact on your server.

HI Iam trying to get into my account in Adobe Form Central and when i click on sign in..not working

HI Iam trying to get into my account in Adobe Form Central and when i click on sign in...the screen shows " this page cannot be displayed" is there a problem with the site?

I just found that Amazon web services does have a network issue with one of their instances that is affecting some regions around the east coast, this could be affecting your ability to sign into FormsCentral. They will likely have that back up soon and assuming that could be the issue it should be fixed shortly.
Thanks,
Josh

Dear sony, During the last down time i tried to sign into my account then an error message appeared and my saved password was removed, I don't remember my old password and my birth day, please help me

Dear sony, During the last down time i tried to sign into my account then an error message appeared and my saved password was removed, I don't remember my old password and my birth day, please help me

go to
https://iforgot.apple.com/password/verify/appleid?language=US-EN&returnURL=https ://appleid.apple.com/cgi-bin/WebObjects/MyAppleId.woa&app_id=93&app_type=ext
and anter your apple is and then go to your main id and reset

Trying to sign into my account, it cannot sign me in and it gives me error message 5002

HELP. when trying to sign into my account, it tells me it cannot sign me in and it gives me error message 5002

go to
https://iforgot.apple.com/password/verify/appleid?language=US-EN&returnURL=https ://appleid.apple.com/cgi-bin/WebObjects/MyAppleId.woa&app_id=93&app_type=ext
and anter your apple is and then go to your main id and reset

Thunderbird 24.5.0 won't stop trying to log into NNTP account, can't read old messages

I have a dead news account with a lot of old posts saved. Both of the "Check for new messages" settings for the server are unchecked, and no newsgroups on this server are selected for offline use (anymore).
When I start Thunderbird, it repeatedly tries to log into this account and puts up the password prompt. I canceled the prompt hundreds of times and it kept coming up. Eventually I was able to select one group that had a large unread count and hit C to mark all the posts read, and that seems to have gotten it under control. It still tries to log in at startup, though, and again anytime I select this server or any group or message on it.
Well, it *was* under control for a while, but after my system went to sleep and came back it prompted me a few hundred more times.
While I'm in online mode, Thunderbird refuses to display any of the saved messages. If I select "Work Offline," then it will display them.

''... no newsgroups on this server are selected for offline use (anymore).''
This contradicts with
''If I select "Work Offline," then it will display them.''
So what's correct?
If you still want to access those posts, why can't you simply enter the password for the account?

Getting error trying to log into iTunes account

When trying to sign in iTunes account on sons iMac I get an unknown error in "red" I now the password works as it is mine and works on all
my other devices. I am able to access the Mac app store with his logon and I am able to access iTunes with my logon on the iMac. The picure below is the message I get. Any help?
Thanks,
Felix

Error 13, 14, 35 and 50 (or -50)
These errors are typically resolved by performing one or more of the steps listed below:
Perform USB isolation troubleshooting, including trying a different USB port directly on the computer. See the advanced steps below for USB troubleshooting.
Put a USB 2.0 hub between the device and the computer.
Try a different Dock Connector or Lightning Connector to USB cable.
Eliminate third-party security software conflicts.
There may be third-party software installed that modifies your default packet size in Windows by inserting one or more TcpWindowSize entries into your registry. An incorrectly set default packet size can cause this error. Contact the software manufacturer that installed the packet-size modification for assistance. Or, follow this article by Microsoft to reset the packet size back to the default for Windows:How to reset Internet Protocol (TCP/IP).
Connect your computer directly to your Internet source, bypassing any routers, hubs, or switches. You may need to restart your computer and modem to get online.
Try to restore from another known-good computer and network.
iTunes: Specific update-and-restore error messages and advanced troubleshooting

I am trying to log into my account but get stuck at the login screen

Whenever I try to log into my account it starts thinking for a minute or two and then brings me back to the login screen.Is there something wrong with the account access?

There is a known problem and I am having exact same issue. Power cycling and internet cache does not fix the issue. When a connection to a server fails it has nothing to do with caching issues. It is a network issue on AT&Ts end in a localized region. It works in multiple towers in various locations but does not work where I am. I have reported this to AT&T.

HT201303 I tried to update my security questions this morning but got timed out. Ive just tried to get into my account but the system does not recognise the answers to my question. How can I rectify this problem please

I was trying to update my Security Questions this morning but got 'Timed Out' I've just tried again to get into my security settings but the system does not recognise the information I'm putting in. Can anyone tell me how I can correct this problem. I can still log-in.
Best wishes

Welcome to the Apple Community.
You might try to see if you can change your security questions. Start here, change your country if necessary and go to manage your account > Password and Security.
I'm able to do this, others say they need to input answers to their current security questions in order to make changes, I'm inclined to think its worth a try, you don't have anything to lose.
If that doesn't help you might try contacting Apple through Express Lane (select your country, navigate to iCloud help and enter the serial number of one of your devices)

HT2731 I have a student who is trying to set up an account however it is asking for Credit Card information. The choice of NONE does not appear as an option with the credit cards. Any assistance?

I have a student trying to set up an App Store account (she has an Apple ID), however she is being asked for credit card information. The option of NONE does not appear as one of the choices with the other credit cards.
Any assistance?

There are instrctions on this page for how to create a new account (it won't work with existing account) without giving a credit card number : http://support.apple.com/kb/HT2534 e.g. select a free app in the store and click on 'create Apple id' when 'buying' it.

Firefox 15.0.1 gives an error message when trying to log into my account @u.boisestate.edu

I'm at student at Boise State. When I try to log into my broncomail account, or when I try to access broncomail through the Firefox Mail, I get the following message.
The page isn't redirecting properly
Firefox has detected that the server is redirecting the request for this address in a way that will never complete.
This problem can sometimes be caused by disabling or refusing to accept
cookies.
Cookies are not disabled, and I've not had this problem with prior versions of Firefox.
The other thing I'm noticing is that the little green circle on the tabs for Blackboard and BroncoWeb often never seem to stop spinning.

If clearing cookies doesn't work then it is possible that the file cookies.sqlite that stores the cookies is corrupted. 
Rename (or delete) cookies.sqlite (cookies.sqlite.old) and delete other present cookie files like cookies.sqlite-journal in the Firefox Profile Folder in case the file cookies.sqlite got corrupted.
See also:
*http://kb.mozillazine.org/The_page_is_not_redirecting_properly
*http://kb.mozillazine.org/Cookies
Start Firefox in [[Safe Mode|Safe Mode]] to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance).
*Do not click the Reset button on the Safe mode start window or otherwise make changes.
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes
Create a new profile as a test to check if your current profile is causing the problems.
See "Creating a profile":
*https://support.mozilla.org/kb/profile-manager-create-and-remove-firefox-profiles
*http://kb.mozillazine.org/Standard_diagnostic_-_Firefox#Profile_issues
There may be extensions and plugins installed by default in a new profile, so check that in "Tools > Add-ons > Extensions & Plugins" in case there are still problems.
If the new profile works then you can transfer some files from the old profile to that new profile, but be careful not to copy corrupted files.
See:
*http://kb.mozillazine.org/Transferring_data_to_a_new_profile_-_Firefox
You can also try to reset Firefox:
*https://support.mozilla.org/kb/Basic+Troubleshooting

Trying to log into my account an error message "this version of itunes has not been correctly localized for this language please run English version

Today logging into my Itunes account an error message comes up, "This versionof Itunes has not been correctly localized for this language. Please run English version. Don't know why Im getting this and cannot get into account at all

For general advice see Troubleshooting issues with iTunes for Windows updates.
The steps in the second box are a guide to removing everything related to iTunes and then rebuilding it which is often a good starting point unless the symptoms indicate a more specific approach. Review the other boxes and the list of support documents further down page in case one of them applies.
Your library should be unaffected by these steps but there is backup and recovery advice elsewhere in the user tip.
tt2

I have accidently created two itunes accounts! and i want to combine them. I've tried to log into one account to change the email address, so maybe the accounts would link, but i cannot log in. any help?

SO..I have accidently created two itunes accounts. I need to some how combine them. any ideas???

Sorry... can't be done. Apple says no when it comes to merging accounts.
Read here > Frequently Asked Questions About Apple ID

Error when trying to log into iTunes account.

When I go into iTunes from my laptop to update apps that I have, it prompts me to put in my password. When I put in my password, it tells me there's an unknown error and to put it in again. When I did, it tells me that my password has be put in to many times and it's incorrect. I changed my password and it's still doing that to me. Any help on how I can get rid of that?

Debbecjam wrote:
What can I do
Telling us what the error says would be a good start.

Is someone trying to break into my mailserver?

My imap access log shows hundreds of attempts by "someone" to log in:
May 13 03:28:47 h-64-105- imap[27373]: AOD: crypt authentication error: authentication failed for user: chris (-14090)
May 13 03:28:47 h-64-105- imap[27373]: AOD: check pass: -14090
May 13 03:28:47 h-64-105- imap[27373]: badlogin from: 000-223-433.area3.spcsdns.net [68.247.101.101]. login user: chris (error = -6)
"chris" is a bonafide user, but she was not the person trying to login.
Harmless or should I worry? And if the later, what can I do about it?

It is still continuing as of this morning, this time
from a different IP address: 70.5.94.75. Both IPs are
SprintPCS addresses. Not knowing much about this sort
of thing, I'd say this is an automated "attack" as
the login requests happened every couple of minutes.
Yes, look like a dictionary attack then.
Presumably this POS will get tired and go away, but
I'm wondering if it is harmful or degrading my
system.
Also, is there any recourse? Something more
creative than a strongly worded complaint to his
ISP?
If it happens to be always the same IP, you can firewall it. Unfortunately, these attacks often come from hijacked machines and keep changing IPs.
The best you can do is make sure you have no weak passwords. Also disallow clear text passwords.
Also make sure ssh is restricted and not open to all your users.
Another option would be to close POP/IMAP to non local network users and require VPN for the travelling users (can be a pain for users with mobile devices though).
Alex, by "mail only" do you mean clients without
network homes? All my users are managed and share
files, but their homes are local. Do you recommend I
disable the login shell?
If they need to be able to mount shares, you can't prevent logins. You can however disable their shell (there is no reason why a normal user would need terminal access to a server).

Who's trying to break into my account?

Similar Messages

Maybe you are looking for