What to do if someone is trying to distributed brute force my account?
 

I recieved three e-mails within a minute of three different IPs being locked out for trying the wrong password on this forum...

I noticed the same thing on my account. I had to create this new account so i can post about it since i am unable to log in. The 3 emails i received are from IPs 78.x,200.x, and 219.x. When i do an IP lookup, these IPs is from Indoneisa, Argentina, and Czech Republic

I had the same 2 times. But I don't see any reason to mask the ip adresses of the abusive users:
94.228.204.2
and
178.213.33.129

But I'm not locked out which the mail says, because I'm always logged in.:)

However it's no good news when it seems people are trying to bruteforce accounts. Maybe somebody can do a good thing and put up some ip bans if they are not dynamic ip's.

I received a couple of emails too.

Both 114.141.50.11 and 125.167.233.138 are trying to access my account.

Here is the 3 IPs from the email:
200.117.239.246
78.41.17.230
219.83.101.234

Interesting they all of the IP address is different

A few minutes ago I received this notice in my email:
I'm glad the intruder didn't get in, because my password wasn't all that strong, but evidently strong enough... this time.

I have changed my password to something very strong now, and I'm only posting this as a heads up for anyone who either doesn't have a strong password, or thinks it's strong enough, or hasn't changed it in a while. It's time to check it out.

ear SpanishHarlem,

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 194.44.172.18

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:
https://vborg.vbsupport.ru/login.php?do=lostpw

All the best,
vBulletin.org Forum

I got the same email just now

203.29.27.114
222.173.42.106
218.98.192.202

Here

I got one too from another IP. The IP resolves to Bangkok, Thailand. Looks like a bot might have been at work.

Same here

189.90.254.146

Just got one too...

Dear Beav`,

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 93.114.63.249

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:
https://vborg.vbsupport.ru/login.php?do=lostpw

All the best,
vBulletin.org Forum

I just logged on here because I am also getting the emails. The IP's are: 222.124.29.242 & 201.22.184.4

The person trying to log into your account had the following IP address: 201.209.69.134 4:20 PM
The person trying to log into your account had the following IP address: 222.124.217.170 4:20pm
The person trying to log into your account had the following IP address: 195.191.168.5 4:20PM

I changed my password to something super secure. Combo of all my high tech passwords. Good luck h4x0rs

I also changed mine.

Same thing happened here.
221.1.96.22 from China is the culprit at 01:40 (GMT+2).

218.28.111.46 which resolves to pc0.zz.ha.cn just locked out my account here.

A forum that I regularly visit was hacked last night and has been taken down, but strangely, my username is slightly different there, and the password is completely different.

Got the same email.. twice.

The person trying to log into your account had the following IP address: 213.197.81.50

The person trying to log into your account had the following IP address: 203.113.117.139

Not sure if I need to report this or not, but my account was locked out as some one was trying to guess/hack my password. I have updated it to something a little bit more secure just to be safe. The IP reported in the email was 122.225.100.5 which traces back to china.

I realize this isnt relevant to this forum btw, but no where else an unlicensed member can post that I know of.

Got the same emails.

You can't do anything. vB.org admins should disable the "Member list" feature:

https://vborg.vbsupport.ru/memberlist.php

Bots are taking usernames from that list and using brute force attack on this site.

I sent a PM to the admins about this.

Happened to me as well 2x earlier. I logged in and also updated the password.

Ditto, 3 tries in the same minute from Bulgaria, Italy, and Brazil based upon the IPs. Password was already pretty secure, but just to be safe I changed it to a REALLY long (randomly generated) password.

KeePass FTW :)

Same here...from 120.29.159.14 and 210.245.85.33

Glad to see its not just me. Atleast I know I wasnt specifically targeted lol.

Yup, same thing about an hour ago.

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 60.28.212.184

Ip shows China.

Strange, someone tried to access my account 3 times - each time failing. About 45 minutes ago.

I.P's used were:
78.41.17.230
222.124.5.82
200.117.239.246

Well, they can carry on trying - since I use alpha-numerics with symbols.

I just checked my password on http://passwordchecker.co.uk/ its states 100% strong! ;)

Yep same thing here, got 2 of those emails this morning. IP's were from Indonesia.

<a href="https://vborg.vbsupport.ru/showthread.php?t=264345" target="_blank">https://vborg.vbsupport.ru/showthread.php?t=264345</a>

Are any of you guys on PSN? I'm getting all kinds of password reset requests today.

i got the same thing, check the other topic and you will see you are not alone:
https://vborg.vbsupport.ru/showthrea...74#post2201074

I'm not... I do not play any game consoles at all.

I had someone try and get in to my Facebook account, but again they failed. If you're using secure hashed passwords I would very much doubt they could crack it anyway.

203.153.31.27
200.96.37.206

Both myself and the owner of our site got notices as well. We're not pleased.

91.203.178.139
109.238.238.242

This was at 7pm EST for me.

46.0.203.92
77.247.211.160

118.97.81.155
222.124.29.242

118.97.81.155
222.124.29.242

118.97.81.155
222.124.29.242

I just got two. However, when I logged in here, my original password worked without issue. Very odd. What would they accomplish? I checked the login link in the email and it looked like a direct link, not a redirect.

Mine occured at 7:24PM, IP addresses were 201.24.152.98
and 178.213.33.129

--------------- Added [DATE]1306635143[/DATE] at [TIME]1306635143[/TIME] ---------------

Here's the header, minus my email address:

I'm pretty sure the mails are legit. Especially since the guy with the first reply actually got his account hacked.