Misc/Other - Account hijack attempt on your site

[Master-Guy]

Dear administrators,

Please note that there is a hijack bot attacking your website.
It originates from the IP address 114.111.167.229, which is a known source of trouble.
Would you please be so kind to permanently block this IP from your website, and prevent it from attempting to brute-force accounts? Your 15 minute block seems to have slowed it down for now.

With kind regards,
"Master-Guy" Marcel

[harleyknd1]

I can confirm this, it uses proxy IP's to bypass the timers, last attack attempt on my account came from: 101.254.188.198

I suggest all users to change their passwords to a md5 string which should make brute force impossible

[NovoCiv]

There is also a bot attacking from 202.100.167.169

This IP comes up in a lot of spam reports so it's also safe to block.

[sanoja]

Also known attack IP coming from 120.55.167.192

[ForceHSS]

This happens every few months nothing to worry about

[Duke49th]

Same here guys:

Dear Duke49th,

Someone has tried to log into your account on vBulletin.org Forum with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 87.229.235.202

All the best,
vBulletin.org Forum

The only thing making me worry a bit is that he tried vbulletin.org - I used the same email adress on linuxmint forums which was hacked two times a couple of weeks ago. (but I use different random passwords now everywhere since that day)

Someone else was registered there with the email he used here? Is it really happening randomly here in this forum?

@ForceHSS: I have a stalker thats why I am a bit nervous also^^

[ForceHSS]

Originally Posted by Duke49th

Same here guys:



The only thing making me worry a bit is that he tried vbulletin.org - I used the same email adress on linuxmint forums which was hacked two times a couple of weeks ago. (but I use different random passwords now everywhere since that day)

Someone else was registered there with the email he used here? Is it really happening randomly here in this forum?

@ForceHSS: I have a stalker thats why I am a bit nervous also^^

If you have a strong password you don't need to worry and on your email make sure you have the two step security put in place it will stop them getting into your email system

[TheLastSuperman]

Originally Posted by Duke49th

Same here guys:



The only thing making me worry a bit is that he tried vbulletin.org - I used the same email adress on linuxmint forums which was hacked two times a couple of weeks ago. (but I use different random passwords now everywhere since that day)

Someone else was registered there with the email he used here? Is it really happening randomly here in this forum?

@ForceHSS: I have a stalker thats why I am a bit nervous also^^

Great! Always do this for every site! Problems remembering passwords? Don't have your browser do it (virus on pc and all passwords now known ) instead purchase a black ledger book or similar from local store, write down all passwords in there - a different one for each site .

Yes it happens here and on other forums randomly, they do this because quite a few people still use the password... "password" which is silly at best! Using your birthday if Dec 20th for example 1220 as a password is also silly. The moral of the story is... you guessed it - Don't be silly! (lol). 18+ character/digit passwords using upper+lower case letters numbers and symbols, if you can go more than 18 characters then by all means do so.

Originally Posted by ForceHSS

If you have a strong password you don't need to worry and on your email make sure you have the two step security put in place it will stop them getting into your email system

^^ Force is a regular member on here, his advice on this is solid. Closing thread like the countless others i.e. this has been posted before but no one ever uses the search they just post to cause mass panic J/K J/K . I'll bug Paul about having the email being sent changed so there is some form of info/disclaimer regarding why you shouldn't post and so you know it happens every now and then no promises but I will follow up to see about it.

DO NOT USE THE SAME PASSWORD FOR EVERY SITE!