Misc/Other - Account hijack attempt on your site
 

Dear administrators,

Please note that there is a hijack bot attacking your website.
It originates from the IP address 114.111.167.229, which is a known source of trouble.
Would you please be so kind to permanently block this IP from your website, and prevent it from attempting to brute-force accounts? Your 15 minute block seems to have slowed it down for now.

With kind regards,
"Master-Guy" Marcel

I can confirm this, it uses proxy IP's to bypass the timers, last attack attempt on my account came from: 101.254.188.198

I suggest all users to change their passwords to a md5 string which should make brute force impossible

There is also a bot attacking from 202.100.167.169

This IP comes up in a lot of spam reports so it's also safe to block.

Also known attack IP coming from 120.55.167.192

This happens every few months nothing to worry about

Same here guys:

The only thing making me worry a bit is that he tried vbulletin.org - I used the same email adress on linuxmint forums which was hacked two times a couple of weeks ago. (but I use different random passwords now everywhere since that day)

Someone else was registered there with the email he used here? Is it really happening randomly here in this forum?

@ForceHSS: I have a stalker thats why I am a bit nervous also^^

If you have a strong password you don't need to worry and on your email make sure you have the two step security put in place it will stop them getting into your email system

Great! Always do this for every site! Problems remembering passwords? Don't have your browser do it (virus on pc and all passwords now known :p) instead purchase a black ledger book or similar from local store, write down all passwords in there - a different one for each site :cool:.

Yes it happens here and on other forums randomly, they do this because quite a few people still use the password... "password" which is silly at best! Using your birthday if Dec 20th for example 1220 as a password is also silly. The moral of the story is... you guessed it - Don't be silly! (lol). 18+ character/digit passwords using upper+lower case letters numbers and symbols, if you can go more than 18 characters then by all means do so.

^^ Force is a regular member on here, his advice on this is solid. Closing thread like the countless others i.e. this has been posted before but no one ever uses the search they just post to cause mass panic J/K J/K :p. I'll bug Paul about having the email being sent changed so there is some form of info/disclaimer regarding why you shouldn't post and so you know it happens every now and then no promises but I will follow up to see about it.

DO NOT USE THE SAME PASSWORD FOR EVERY SITE!