vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin.org Site Feedback (https://vborg.vbsupport.ru/forumdisplay.php?f=7)
-   -   What to do if someone is trying to distributed brute force my account? (https://vborg.vbsupport.ru/showthread.php?t=264343)

tekram 05-29-2011 06:18 AM

Here the same:

The person trying to log into your account had the following IP address: 222.173.42.106
The person trying to log into your account had the following IP address: 115.127.15.44

Brandon Sheley 05-29-2011 06:28 AM

same here...
95.154.98.152

seems like a problem is starting....

Oblivion Knight 05-29-2011 06:40 AM

..and here - 2 different IPs, identical times;
94.228.204.2
94.228.204.30

Kesomir 05-29-2011 07:08 AM

and here: 83.222.206.146 and 81.30.164.94

Frosty 05-29-2011 07:43 AM

Someone might have coded a bot, best thing would be to disable the member list, otherwise they can get the list of our usernames. :(

Marv 05-29-2011 08:33 AM

Happend to me also. Seems they attacked all accounts with 3 bruteforce attempts. That makes me worry about those, who have only one or two and not three recorded events. Could mean they were succesful with one of their attempts.

I guess there are a few users here, which have sent their logins from servers or admincps to others (i.e. to mod developers in times of support etc.) Something very unsecure, but I?m sure some did that. Would be wise to inform all users - and to force all vb.org members to setup a secure passphrase.

--------------- Added [DATE]1306661692[/DATE] at [TIME]1306661692[/TIME] ---------------

Quote:

Originally Posted by Frosty (Post 2201170)
Someone might have coded a bot, best thing would be to disable the member list, otherwise they can get the list of our usernames. :(

Thats senseless. The bot can even read the threads or the WGO box etc. That makes no sense to disable the ML.

Frosty 05-29-2011 08:43 AM

True.. But memberlist contains offline members, while online box has only online members. But good point anyway.

Bigger damage can be done with the memberlist than with the online box.

Marv 05-29-2011 08:59 AM

Quote:

Originally Posted by Frosty (Post 2201185)
True.. But memberlist contains offline members, while online box has only online members. But good point anyway.

Bigger damage can be done with the memberlist than with the online box.

You?re right, true. I was regarding this from a point of the bigger threatlevel. I suppose an inactive account has not or not really often PN?s in it. So the threatlevel isn?t that big.
All others, the active users, can be found in the threads here. And to programm a bot to get those accountnames is done in a blink of an eye. Whatever, disabling the ML could help with an additional benefit, even when it would be a very little one. But sometimes that makes a difference.

Nukey 05-29-2011 10:02 AM

I haven't logged on since Dec 2007 and just got the same email:
82.145.242.38
201.22.130.226

Frosty 05-29-2011 10:15 AM

IP's resolve to online proxies, which means this is a 100% automated attack.


All times are GMT. The time now is 04:03 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01132 seconds
  • Memory Usage 1,734KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (2)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete