Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 General Discussions
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 05-15-2013, 11:05 PM
egexperiment626 egexperiment626 is offline
 
Join Date: Oct 2008
Posts: 25
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Failed Login Attempts

In the last week, 3members reported receiving emails that said "they had 5 failed attempts at logging into their account". I also got one that someone tried my account. Both members report it wasn't them trying to log in. The user names started with "APR", "BAM" and "BER", so I'm wondering if someone going down my members list trying to log in?

Has anyone had this happen to them? It looks like it's the same IP trying to hit all the accounts, so I've banned it. But I'm wondering if there is something else I should be doing.

I recently added a bunch of mods, could that be causing the issue?

Help!
Reply With Quote
  #2  
Old 05-16-2013, 12:02 AM
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
Posts: 6,357
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

It's bots trying to force there way into accounts
Reply With Quote
Благодарность от:
egexperiment626
  #3  
Old 05-16-2013, 01:13 AM
egexperiment626 egexperiment626 is offline
 
Join Date: Oct 2008
Posts: 25
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

A quick internet search of the IP shows it seems to be happening on other sites. I blocked the IP and similar IPs... hope that does the trick. Also ran a check for vulnerable passwords and all members passed.

If there are suggestions on other things to do, I'm open to ideas!
Reply With Quote
  #4  
Old 05-16-2013, 02:31 AM
ForceHSS ForceHSS is offline
 
Join Date: Apr 2008
Posts: 6,357
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

www.vbulletin.org/forum/showthread.php?t=268208
www.vbulletin.org/forum/showthread.php?t=294633
Also the one in my sig
Reply With Quote
  #5  
Old 05-16-2013, 12:50 PM
Joe Chapline Joe Chapline is offline
 
Join Date: Mar 2010
Posts: 2
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

The same thing is happening on my forum. The hacker's IP address is already banned under options/user banning options in the forum admin control panel, but apparently that doesn't stop login attempts. I'm looking for a way to do that.
Reply With Quote
  #6  
Old 05-16-2013, 08:55 PM
egexperiment626 egexperiment626 is offline
 
Join Date: Oct 2008
Posts: 25
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

That Ban Spiders by User Agent mod looks pretty good. I have a great spam program and have blocked the URL, but with them trying to login as existing members there really isn't a stop. But that Ban Spiders might help. And it'll be nice to control the spiders.
Reply With Quote
  #7  
Old 05-16-2013, 11:47 PM
Amaury Amaury is offline
 
Join Date: Nov 2011
Location: Ellensburg, WA
Posts: 1,075
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

It's nothing to worry about if you have a secure password.

We started getting them a few days ago.
Reply With Quote
  #8  
Old 05-17-2013, 01:39 AM
egexperiment626 egexperiment626 is offline
 
Join Date: Oct 2008
Posts: 25
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I wasn't worry... Until I had a member request an account delete because of it. So anything I can do to comfort the members I'm trying to do.
Reply With Quote
  #9  
Old 05-17-2013, 01:47 AM
Amaury Amaury is offline
 
Join Date: Nov 2011
Location: Ellensburg, WA
Posts: 1,075
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by egexperiment626 View Post
I wasn't worry... Until I had a member request an account delete because of it. So anything I can do to comfort the members I'm trying to do.
Post an announcement on your forum that reassures members it's nothing to worry about. Just make sure they have secure passwords.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 06:09 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04313 seconds
  • Memory Usage 2,239KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (1)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (9)post_thanks_box
  • (1)post_thanks_box_bit
  • (9)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (1)post_thanks_postbit
  • (9)post_thanks_postbit_info
  • (9)postbit
  • (9)postbit_onlinestatus
  • (9)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • fetch_musername
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • post_thanks_function_fetch_thanks_bit_start
  • post_thanks_function_show_thanks_date_start
  • post_thanks_function_show_thanks_date_end
  • post_thanks_function_fetch_thanks_bit_end
  • post_thanks_function_fetch_post_thanks_template_start
  • post_thanks_function_fetch_post_thanks_template_end
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete