Major Issue
 

Okay, earlier today before I left for work, my site had several apache messages pop up. I get home from work and try to log into my site and it says that I have the wrong password/username. Evedently any account that logs out, is now unable to log back in. All my users are getting the same "You've reached the password quota" message. So I'm assuming that once again, I've been hacked. Is there anyway that I can fix this problem asap?

this is related to the server, not the software... you will have to contact your host...

vb is just not all that secure. This is the second time this has happend. Right now it's escalated to the point where everyone is now IP banned and no one can even view the site. My server host's response:

Whatever, guess there's nothing I can do as usual.

What is your setting for:

AdminCP -> vBulletin Options -> Server Settings and Optimization Options -> Session IP Octet Length Check

Thanks for response Marco but atm, I'm banned from my own site. Can't even access the admincp. But I guess if I decided to make another site which I'm not sure of now (I'm a target for hackers for some reason and have had several sites hacked) I could keep that in mind. Thanks.

Are you locked out from your site or the forum only?

If it is the site, the server and/or your server account got hacked. If you can still access the forum pages, but can't login, your forum has been hacked.

In order to assist we need to know where you need help ;)

I'm locked out of my forum as is every other member of the site. Any page you try to visit on the forum, it just says that you've been IP banned.

My host is terrible and took away my cpanel like 2 weeks ago. I've contacted them about it and they said the reason was because I didn't renew the domain name that they provided which imo is rather absurd. I said, alright, I'll renew the domain that I don't use in order to get my cpanel back. The sales team has still not let me gain access to my cpanel.

So byethost<<<

So this means you don't have even access to the database?

Well anyway this should do the job:

UPDATE setting SET value='0' WHERE varname='ipcheck' LIMIT 1;
UPDATE setting SET value='' WHERE varname='banip' LIMIT 1;

Please note that you may need to change also the datastore => options row, setting the above values accordingly.

Changing these values remove the IP ban, but the hacking damage may go further.

I have no clue what happened, but I just came home and went to my site and it's back. So this might have not been a hack job but rather my host just somehow messing up my site. But anyways, as always you guys are great and are willing to help. I appreciate it.

No, you're just not secure. vBulletin is only as secure as its admins/server.

I've been running vBulletin for over 3 years now, and never once been hacked.