vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB4 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=251)
-   -   Someone trying to hack me (https://vborg.vbsupport.ru/showthread.php?t=280805)

aaronater 03-28-2012 05:18 PM

Someone trying to hack me
 
I keep getting emails saying my vbulletin.org account has been locked. 4 today.

It's showing the the IP's from Asia.

Should I worry?

Christos Teriakis 03-28-2012 05:20 PM

Same here.....

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.
The person trying to log into your account had the following IP address: 109.73.65.24

aaronater 03-28-2012 05:21 PM

I am guessing they are doing a reverse brute force maybe?

As in rather than loading 1000's of pws, they load 1000's of usernames and run 5 pw's on each username?

Alex@Mk3OC 03-28-2012 05:22 PM

I had this a little earlier today as well

denman75 03-28-2012 05:23 PM

same here ,scared the #$# out of me ,first that stupid base64 redirect crap on my board ,now this what up with them idiots!

Dannyloski 03-28-2012 05:24 PM

Just happened to me as well. I logged in and changed my password.

The IP was 109.73.65.24 ... Shows it's from the UK.

dodgechargerfan 03-28-2012 05:29 PM

Same here.

Same IP as Dannyloski..

DogPatch1992 03-28-2012 05:31 PM

I just got this as well.

IP is 109.73.65.24

abqtj 03-28-2012 05:32 PM

Got two of those myself today, same IP.

aaronater 03-28-2012 05:32 PM

Yeah, they are running a list of usernames against 5 passwords :O Probably harvesting them from the forums.

ajmboy 03-28-2012 05:34 PM

me too....2 emails already.

IPs: 109.73.65.24 & 178.48.2.37

Brandon Sheley 03-28-2012 05:40 PM

<a href="https://vborg.vbsupport.ru/showthread.php?t=280796" target="_blank">https://vborg.vbsupport.ru/showthread.php?t=280796</a>

Detomah 03-28-2012 05:40 PM

Just got the same thing here:

Quote:

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 109.73.65.24
Edit: just saw the other post above me, posted at same time. ><

CoTTon 03-28-2012 05:41 PM

Same.

3 emails from 122.72.112.148
122.72.2.200
212.233.140.161

bananalive 03-28-2012 05:41 PM

Same ip address 109.73.65.24

adambloch 03-28-2012 05:42 PM

I'm getting the same... I have spoken to the hosting company that host the IP address and very hassled man said that he's been getting call non stop about it. He said that they are looking into it and trying to stop it. 109.73.65.24 as for the other thats in Hungary....

A

denman75 03-28-2012 05:52 PM

i am glad that they did not find my password , its 12345 its so easy no one will even try that

DJDrew 03-28-2012 06:08 PM

Yeah I have had the same problem! I haven't even used the forum for years!

cyberviewer 03-28-2012 06:24 PM

Same email and here

Quote:

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 109.73.65.24
Ripe Database gives
Quote:

inetnum: 109.73.65.0 - 109.73.65.127
netname: NetcoSolutions
descr: IT Services
country: GB
admin-c: RA1415-RIPE
tech-c: RA1415-RIPE
status: ASSIGNED PA
remarks: ABUSE REPORTS: info@netcosolutions.com
remarks: ABUSE REPORTS: abuse@redstation.com
mnt-by: REDSTATION-MNT
mnt-domains: redstationmntner
mnt-routes: REDSTATION-MNT
source: RIPE #Filtered




role: Redstation Admin Role
address: Redstation Limited
address: 2 Frater Gate Business Park
address: Aerodrome Road
address: Gosport
address: Hampshire
address: PO13 0GW
address: UNITED KINGDOM
abuse-mailbox: abuse@redstation.com
admin-c: KMAC-RIPE
tech-c: PA5242-RIPE
nic-hdl: RA1415-RIPE
mnt-by: REDSTATION-MNT
source: RIPE #Filtered




Update
Delete
More Info from RIPEstat
route: 109.73.64.0/20
descr: FTIP002960302 Redstation Limited
origin: AS35662
mnt-by: REDSTATION-MNT
source: RIPE #Filtered

danyz81 03-28-2012 06:42 PM

Same here:

The person trying to log into your account had the following IP address: 109.73.65.24

hostname: 24-65-73-109.rackcentre.redstation.net.uk

CAG CheechDogg 03-28-2012 07:26 PM

Ok so it's not just my account which is being hit.

Who ever is in charge of vbulletin.org should block the IPs using .htaccess by adding the following to it:

deny from 109.73.65.24

Everyone else here who has access to their .htaccess file should do the same on their site too just for precautionary reasons.

vbenhancer 03-28-2012 08:00 PM

hum, CAG, i think they handle it pretty well...

https://vborg.vbsupport.ru/showthread.php?t=280796 for the followup...

blind-eddie 03-28-2012 10:57 PM

The British are comimg....the british are coming......

Lynne 03-28-2012 11:08 PM

Closing this thread since there is already a post about this in the appropriate forum here - https://vborg.vbsupport.ru/showthread.php?t=280796


All times are GMT. The time now is 04:55 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01051 seconds
  • Memory Usage 1,753KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (3)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (24)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete