vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin.org Site Feedback (https://vborg.vbsupport.ru/forumdisplay.php?f=7)
-   -   Account locked? (https://vborg.vbsupport.ru/showthread.php?t=280796)

DanHamilton 03-29-2012 05:21 AM

Well, This has happened to me...
Just banned every IP In the thread from my server and going to check It often.

Hope this gets sorted out.

almannai 03-29-2012 05:29 AM

Add me to the list
109.73.65.24

doctorsexy 03-29-2012 07:22 AM

Me to...109.73.65.24

Bulent Tekcan 03-29-2012 07:25 AM

Same here

The person trying to log into your account had the following IP address: 109.73.65.24

digicom 03-29-2012 11:26 AM

The person trying to log into your account had the following
IP address: 109.73.65.24

cnredd 03-29-2012 12:26 PM

Add me to this list for 109.73.65.24...

Info on the IP address...

http://www.ipillion.com/ip/109.73.65.24

Abizaga 03-29-2012 12:53 PM

Quote:

Originally Posted by Boofo (Post 2314378)
Whew! Good thing I use passwrod for my password. ;)

hahahahaha.


I got the email, too, heh heh

doctorsexy 03-29-2012 01:18 PM

Has anyone who reported this had a reply from rackcentre.redstation.net.uk

about this muppet..

heres who it is http://whatismyipaddress.com/ip/109.73.65.24

Abizaga 03-29-2012 01:48 PM

from where? It looks like everyones been reporting.

Brandon Sheley 03-29-2012 02:10 PM

Quote:

Originally Posted by doctorsexy (Post 2314685)
Has anyone who reported this had a reply from rackcentre.redstation.net.uk

about this muppet..

heres who it is http://whatismyipaddress.com/ip/109.73.65.24

I really doubt that's the users real IP
Most likely a proxy...

vbenhancer 03-29-2012 04:31 PM

actually, redstation IS a proxy provider... :)

Nocturnal222 03-29-2012 06:17 PM

can someone send me copies of all of the hacker's possible ips? would love to add them on our ban list

DanHamilton 03-29-2012 07:40 PM

Quote:

Originally Posted by Nocturnal222 (Post 2314787)
can someone send me copies of all of the hacker's possible ips? would love to add them on our ban list

Or you could go through the thread and ban every IP you see that someone reported...

bleros 03-30-2012 01:54 PM

:) March 28

The person trying to log into your account had the following IP address: 109.73.65.24

DanHamilton 03-30-2012 08:19 PM

Nobody has tried to brute force my login account since I banned all IPs I found from this thread.
:)

Hope this passes over soon!

Lynne 03-30-2012 08:49 PM

Quote:

Originally Posted by DanHamilton (Post 2315170)
Nobody has tried to brute force my login account since I banned all IPs I found from this thread.
:)

Hope this passes over soon!

We are talking about brute forcing the login here on vb.org. There is no sort of banning you can do to stop it, it is something you would need to do on the vb.org server or the vb.org admincp which you do not have access to. Right?!?! :eek:

nhawk 03-30-2012 08:57 PM

I would bet that most all of the IPs are from kryptservers, rackcentre, svservers, steephost and uk2net.

DanHamilton 03-31-2012 08:27 AM

Quote:

Originally Posted by Lynne (Post 2315179)
We are talking about brute forcing the login here on vb.org. There is no sort of banning you can do to stop it, it is something you would need to do on the vb.org server or the vb.org admincp which you do not have access to. Right?!?! :eek:

One person tried to brute force my account on my forums.

setishock 03-31-2012 09:13 PM

What are they going to do when they find one? Or several? Or a bunch...

Calystos 06-10-2013 06:55 AM

First time for me, but had it twice today too.

IP: 216.201.182.164
IP: 113.200.214.44

Sad theres idiots out there with nothing better to do than try an mess with other peoples stuff.

bzcomputers 06-10-2013 07:20 AM

First time for me too, but unfortunately it was 15 times in the last 12 hours!

A couple this morning one right after the other, then a dozen tonight all within about 10 minutes. Here are all the ip addresses.

Code:

2.133.93.210
2.133.94.42
187.20.38.139
125.39.66.149
91.212.124.153
183.62.139.214
91.151.176.95
165.24.10.7
116.236.216.116
74.121.191.133
222.124.19.210
221.10.102.203
113.53.254.124
59.124.2.233
89.218.160.50


clauz 06-10-2013 09:43 AM

Same here, "Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times"
the adresses:
119.36.87.26
112.5.183.235
223.4.31.172
77.65.19.35
178.137.239.16
202.116.1.148
183.136.146.110
89.218.100.146
189.11.198.141
94.23.29.189
110.139.206.123
89.218.100.106
186.215.126.175
220.132.19.136
109.224.62.197

All confirmed proxy servers.

ChrisTech 06-10-2013 10:43 AM

123.103.23.106
166.111.132.167
142.54.188.180
94.23.29.189

Yet again. Gotta love it.

CableSux 06-10-2013 11:58 AM

I've received 49 such emails between 1:47AM and 2:40AM EST today. Does the admin want the IPs? Any advice? I assume there's not much we, as users, can do? Obviously my password is working. Seems kinda stupid that a spammer would want to hack a non-admin's forum account. It's not like they're going to gain access to any money here.

Amaury 06-10-2013 01:40 PM

Instead of necro-bumping, why not post in this recent thread?

CableSux 06-10-2013 03:33 PM

Quote:

Originally Posted by Amaury25 (Post 2427103)
Instead of necro-bumping, why not post in this recent thread?

Because this one showed up as the most recent when I looked for a thread.

"Today, 07:43 "

Amaury 06-10-2013 03:49 PM

Quote:

Originally Posted by CableSux (Post 2427131)
Because this one showed up as the most recent when I looked for a thread.

"Today, 07:43 "

Sorry, I was directing that toward this post, the post that necro-bumped it.

Dan! 06-10-2013 04:21 PM

I have received 27 emails all with different ip addresses in the same instance.

I can post all the ip addresses if you wish to ban them

Edit: just noticed this is a old thread, my mistake.

craigvm 06-10-2013 05:30 PM

I've had the same emails today too 32 of them i also started a thread about it earlier but it got removed for some reason

Amaury 06-10-2013 05:43 PM

Quote:

Originally Posted by craigvm (Post 2427164)
I've had the same emails today too 32 of them i also started a thread about it earlier but it got removed for some reason

It was merged with this because it's unnecessary to have multiple threads on the same thing.

dodgeboard.com 06-10-2013 11:42 PM

I just received a gillion of these hack attemps on my username

186.101.41.38
125.39.66.155
177.135.236.245
50.57.231.130
202.118.236.130
118.195.65.248
119.39.152.80
124.237.77.154
217.24.251.46
119.136.28.49
222.124.185.91
86.96.229.68
109.175.8.42
190.102.17.240
119.187.148.81
58.22.151.184
80.65.90.146
91.228.53.28
109.111.160.112
142.54.169.187
89.218.100.146
2.133.92.18
218.29.154.54
117.218.37.18
192.110.163.22
46.16.180.58
177.159.204.90
221.2.80.126
91.98.155.120
211.151.115.16
41.89.130.6
89.218.101.114

Damn, where does someone find all those proxies. And why is my account so important?

Drakah 06-10-2013 11:44 PM

Same here, got about 30 of them in my email....something is going on

Paul M 06-11-2013 12:09 AM

Please do not post long lists of IP addresses, it serves no purpose, just fills the thread with long posts.

cincinnatiscoob 06-11-2013 12:30 AM

Where do we share this information or what is being done as someone has clearly tried to access multiple users info?

dvsDave 06-11-2013 12:39 AM

I just started getting these emails about 10 minutes ago, I'm assuming that the lockout period is disabled since I was just able to login in the past minute?

Paul M 06-11-2013 12:45 AM

I believe it only locks out the individual IP, so you could log in ok.

Dukefrukem 06-11-2013 12:56 AM

So far I've had it 37 time in the last 30 minutes and i have the e-mails to prove it.

202.162.192.252
213.186.122.123
89.218.0.18... (not posting them all)

--------------- Added [DATE]1370916187[/DATE] at [TIME]1370916187[/TIME] ---------------

Up to 45 now. This guy must really like me.

domainmagick 06-11-2013 01:11 AM

yeah i was able to login and change my pw just for good measure... someone was very persistent...
but hey it reminded me to come back here and look around :p

dodgeboard.com 06-11-2013 01:28 AM

Quote:

Originally Posted by Paul M (Post 2427233)
Please do not post long lists of IP addresses, it serves no purpose, just fills the thread with long posts.

Thought it might aid you folks in blocking certain hacker IP's. Sorry.

dog-tag 06-11-2013 06:47 AM

3 attacks came from these addresses -
118.175.14.131
125.39.68.226
89.218.100.106

**EDIT** Sorry for posting IPs, but what else can we do?


All times are GMT. The time now is 01:02 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01509 seconds
  • Memory Usage 1,814KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_code_printable
  • (9)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete