A forum claiming I am sending them viruses

So today I woke up and saw a missed call on my phone. I call the number back and he says he is one of the founders of the UAE BMW Club Forum

He tells me that they had multiple attacks of someone trying to send them trojans and it appears from my IP which is linked to my Forums username (Phoenix)

I'm like, how is that possible, I have Avira Antivirus PRO which is one of the best AVs out there + TrendMicro AV built into my ASUS AC5300 Router + AdBlock Plus + I never visit shady sites or anything

The only thing I changed recently is I switched to vpn.ac VPN and connected to their L2Tp Romanian server.

So I told him if he can send me the IP address that was logged on to their forums so I can check if it was a UAE or Romanian IP address, if it was the latter, then I can contact vpn.ac about it.

I rarely if ever visit that forum, I just visited it 2 days ago when I had just installed Firefox so maybe that visit triggered something?

I am no expert on this but can a moderator check my IP address if anything malicious is coming from it whatnot like they say?

@downloads

Just did a scan with Malwarebytes Anti-Malware, no threats found as well.

 

Connecting to a VPN server will give you the IP address associated with that server - along with everybody else who is also connected... I'd make a guess that the IP address will be Romanian and it was another person connected to that same server who was using it for those nefarious activities.

 

@Phoenix indeed, switch to different vpn server.

 

You put your phone number on a forum you rarely visit?!

 

well it's the Dubai BMW Club so I put my phone number there as it's required if I wanted to attend an event for BMW

 

You would think that this would be obvious to the forum administrator. Even several years ago there were multiple tools available to differentiate this activity types like this - add to the fact that the forum uses vBulletin, there's bound to be security extensions/addons available.

Additionally, if the site was really under attack (or they are really this concerned about it such that they go after individual registered members of their site), they should have been using something like CloudFlare (which it looks like they aren't). Base usage of CloudFlare doesn't cost a dime and provides basic web protection.

I'd chalk this one up to an uninformed forum administrator pinning this on the first person they saw even remotely tied to this.

 

Thanks for the explanation man, I was just concerned my system is infected when I know it is super secure. Don't know what was up.