vbulletin hacked

[Quarterbore]

It took some time but I figured out my hacker came from IP: 84.121.141.217

IP owner info (Whois)

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 84.0.0.0 - 84.255.255.255
CIDR: 84.0.0.0/8
NetName: 84-RIPE
NetHandle: NET-84-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: SUNIC.SUNET.SE
NameServer: TINNIE.ARIN.NET
NameServer: NS3.NIC.FR
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at Query the RIPE Database
RegDate: 2003-11-17
Updated: 2004-03-16

# ARIN WHOIS database, last updated 2008-08-23 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.



Deferred to specific whois server: whois.ripe.net...


% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See Whois Database Copyright

Whois record :

[Querying whois-ita.nominalia.com]
[whois-ita.nominalia.com]

NOMINALIA INTERNET S.L. - Whois Server Version 1.4

The Registry database contains ONLY .COM, .NET and .ORG domains.

Domain name: ONO.COM
Created on: 2003-07-28
Updated on: 2008-01-17
Expires on: 2008-12-14
Registrant Name: CABLEUROPA SA
Contact: Cableuropa SA
Registrant Address: C\ Basauri, 7
Registrant City: Aravaca
Registrant Postal Code: E-28023
Registrant Country: ES
Administrative Contact Organization: Cableuropa S.A
Administrative Contact Name: Nicolas Chapa
Administrative Contact Address: Basauri 7-9 Urbanizacion La Florida
Administrative Contact City: Aravaca
Administrative Contact Postal Code: 28023
Administrative Contact Country: ES
Administrative Contact Email: dominios@ono.es
Administrative Contact Tel: +34 911809300
Administrative Contact Fax: +34 911809600
Technical Contact Organization: Cableuropa S.A
Technical Contact Name: Gerente de Servicios de Internet
Technical Contact Address: Basauri 7,9-Urbanizacion La Florida
Technical Contact City: Aravaca
Technical Contact Postal Code: 28023
Technical Contact Country: ES
Technical Contact Email: dominios@ono.es
Technical Contact Phone: +34 911809300
Technical Contact Fax: +34 911809600
Primary Name Server Hostname: DNS01.ONO.COM
Secondary Name Server Hostname: DNS03.ONO.COM


>>> Last update of whois database: Sun Aug 24 12:48:31 2008 <<<

Related IPs:

62.42.230.18 A ono.com
62.42.230.22 MX mx.ono.com
62.42.230.135 NS dns01.ono.com
62.42.230.136 NS dns02.ono.com
62.42.63.51 NS dns03.ono.com

I locked out the hacker's IP and all related IPs. Perhaps this will help someone else