Someone trying to hack me

[aaronater]

I keep getting emails saying my vbulletin.org account has been locked. 4 today.

It's showing the the IP's from Asia.

Should I worry?

[Christos Teriakis]

Same here.....

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.
The person trying to log into your account had the following IP address: 109.73.65.24

[aaronater]

I am guessing they are doing a reverse brute force maybe?

As in rather than loading 1000's of pws, they load 1000's of usernames and run 5 pw's on each username?

[Alex@Mk3OC]

I had this a little earlier today as well

[denman75]

same here ,scared the #$# out of me ,first that stupid base64 redirect crap on my board ,now this what up with them idiots!

[Dannyloski]

Just happened to me as well. I logged in and changed my password.

The IP was 109.73.65.24 ... Shows it's from the UK.

[dodgechargerfan]

Same here.

Same IP as Dannyloski..

[DogPatch1992]

I just got this as well.

IP is 109.73.65.24

[abqtj]

Got two of those myself today, same IP.

[aaronater]

Yeah, they are running a list of usernames against 5 passwords :O Probably harvesting them from the forums.

[ajmboy]

me too....2 emails already.

IPs: 109.73.65.24 & 178.48.2.37

[Brandon Sheley]

<a href="https://vborg.vbsupport.ru/showthread.php?t=280796" target="_blank">https://vborg.vbsupport.ru/showthread.php?t=280796</a>

[Detomah]

Just got the same thing here:


Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 109.73.65.24

Edit: just saw the other post above me, posted at same time. ><

[CoTTon]

Same.

3 emails from 122.72.112.148
122.72.2.200
212.233.140.161

[bananalive]

Same ip address 109.73.65.24

[adambloch]

I'm getting the same... I have spoken to the hosting company that host the IP address and very hassled man said that he's been getting call non stop about it. He said that they are looking into it and trying to stop it. 109.73.65.24 as for the other thats in Hungary....

A

[denman75]

i am glad that they did not find my password , its 12345 its so easy no one will even try that

[DJDrew]

Yeah I have had the same problem! I haven't even used the forum for years!

[cyberviewer]

Same email and here

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 109.73.65.24

Ripe Database gives
inetnum: 109.73.65.0 - 109.73.65.127
netname: NetcoSolutions
descr: IT Services
country: GB
admin-c: RA1415-RIPE
tech-c: RA1415-RIPE
status: ASSIGNED PA
remarks: ABUSE REPORTS: info@netcosolutions.com
remarks: ABUSE REPORTS: abuse@redstation.com
mnt-by: REDSTATION-MNT
mnt-domains: redstationmntner
mnt-routes: REDSTATION-MNT
source: RIPE #Filtered




role: Redstation Admin Role
address: Redstation Limited
address: 2 Frater Gate Business Park
address: Aerodrome Road
address: Gosport
address: Hampshire
address: PO13 0GW
address: UNITED KINGDOM
abuse-mailbox: abuse@redstation.com
admin-c: KMAC-RIPE
tech-c: PA5242-RIPE
nic-hdl: RA1415-RIPE
mnt-by: REDSTATION-MNT
source: RIPE #Filtered




Update
Delete
More Info from RIPEstat
route: 109.73.64.0/20
descr: FTIP002960302 Redstation Limited
origin: AS35662
mnt-by: REDSTATION-MNT
source: RIPE #Filtered

[danyz81]

Same here:

The person trying to log into your account had the following IP address: 109.73.65.24

hostname: 24-65-73-109.rackcentre.redstation.net.uk

[CAG CheechDogg]

Ok so it's not just my account which is being hit.

Who ever is in charge of vbulletin.org should block the IPs using .htaccess by adding the following to it:

deny from 109.73.65.24

Everyone else here who has access to their .htaccess file should do the same on their site too just for precautionary reasons.

[vbenhancer]

hum, CAG, i think they handle it pretty well...

https://vborg.vbsupport.ru/showthread.php?t=280796 for the followup...

[blind-eddie]

The British are comimg....the british are coming......

[Lynne]

Closing this thread since there is already a post about this in the appropriate forum here - https://vborg.vbsupport.ru/showthread.php?t=280796