Massive bruteforcing attack obviously. I have also received several emails. IP addresses of the attackers so far:
80.191.193.2
177.129.88.39
201.211.196.23
Is there any way to disable email notifications at least?
p.s. Suggestion to vbulletin staff: make an option to have one screen/post name and another login name. Thus the attackers will not be able to get login names from posts and will have to bruteforce them first.. and that will greately enhance security and will stop this email spam.
p.p.s. Similar suggestion here -
https://vborg.vbsupport.ru/showthrea...=264376&page=2
Using emails for login (only email and not both mail or username as many sites do). Must be pretty easy to implement, 1-2 rows of php here and there?