Spammers/Hackers attempting to hack our user's accounts
 

Hey folks,

We're having some spammer/hacker problems.

Please see attached image. It shows our "Who's Online" log. Within a span of a couple minutes there are multiple login attempts from multiple IP addresses all over the world. All of them attempt to login to random user accounts.

We've been getting many emails from our members saying that they've been receiving the email that says "Your account has been locked for 15 minutes because someone tried to enter with wrong password, etc."

This is extremely annoying for our members. We don't want our members getting these emails all the time just because spammers are trying to access their accounts.

It seems obvious that whoever is attacking is using proxy servers hence the many random IP addresses. Do any of you have advice for this type of problem? We can block these IP addresses all day but it probably won't do much since they're using proxy.

Any advice or help would be much appreciated. Thanks.

hum, funny, a new bot which is reading your memberslist and then try to lock your forum with this technique...

deactivate your memberslist, you will have no more problems...for now!

--------------- Added [DATE]1238066926[/DATE] at [TIME]1238066926[/TIME] ---------------

AdminCP >> vBulletin Options >> User Listing Options >> Members List Enabled

Thanks for the reply nexialys. Yeah we actually removed the memberlist.php page a while ago, so I'm not sure how they're getting all the usernames.

We just disabled the Who's Online > Active Members list at the bottom of the forum to all logged out guests, so hopefully that might help. But I'd imagine this bot or spammers might simply be going through the forum threads getting usernames too.

Has this type of spammer activity happened with any of you guys? If it keeps up we might have to disable the email that's sent out to users when their account is locked for 15 minutes. I'd hate to do it but we can't tolerate our members getting those notification emails non-stop due to the bots.