Go Back   vb.org Archive > Community Central > vBulletin.org Site Feedback
Reload this Page What to do if someone is trying to distributed brute force my account?
FAQ Community Calendar Today's Posts Search

Reply
Page 2 of 7 1 2 34 Last »
 
Thread Tools Display Modes
  #11  
Old 05-28-2011, 11:03 PM
Boofo's Avatar
Boofo Boofo is offline
 
Join Date: Mar 2002
Location: Des Moines, IA (USA)
Posts: 15,776
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
I got one too from another IP. The IP resolves to Bangkok, Thailand. Looks like a bot might have been at work.

Quote:
Dear Boofo,

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 119.46.110.247

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:
https://vborg.vbsupport.ru/login.php?do=lostpw

All the best,
vBulletin.org Forum
Reply With Quote
  #12  
Old 05-28-2011, 11:03 PM
KevinL KevinL is offline
 
Join Date: Apr 2005
Posts: 1,287
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Same here

189.90.254.146
Reply With Quote
  #13  
Old 05-28-2011, 11:05 PM
DarknessDivine DarknessDivine is offline
 
Join Date: May 2004
Posts: 65
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
I just logged on here because I am also getting the emails. The IP's are: 222.124.29.242 & 201.22.184.4
Reply With Quote
  #14  
Old 05-28-2011, 11:09 PM
TheEnd's Avatar
TheEnd TheEnd is offline
 
Join Date: Mar 2003
Posts: 120
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
The person trying to log into your account had the following IP address: 201.209.69.134 4:20 PM
The person trying to log into your account had the following IP address: 222.124.217.170 4:20pm
The person trying to log into your account had the following IP address: 195.191.168.5 4:20PM

I changed my password to something super secure. Combo of all my high tech passwords. Good luck h4x0rs
Reply With Quote
  #15  
Old 05-28-2011, 11:10 PM
DarknessDivine DarknessDivine is offline
 
Join Date: May 2004
Posts: 65
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Quote:
Originally Posted by TheEnd View Post
I changed my password to something super secure. Combo of all my high tech passwords. Good luck h4x0rs
I also changed mine.
Reply With Quote
  #16  
Old 05-28-2011, 11:15 PM
Zidane007nl's Avatar
Zidane007nl Zidane007nl is offline
 
Join Date: Jul 2004
Location: The Netherlands
Posts: 102
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Same thing happened here.
221.1.96.22 from China is the culprit at 01:40 (GMT+2).
Reply With Quote
  #17  
Old 05-28-2011, 11:16 PM
Limey-YMR Limey-YMR is offline
 
Join Date: Jul 2004
Location: Wake Forest, NC
Posts: 40
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
218.28.111.46 which resolves to pc0.zz.ha.cn just locked out my account here.

A forum that I regularly visit was hacked last night and has been taken down, but strangely, my username is slightly different there, and the password is completely different.
Reply With Quote
  #18  
Old 05-28-2011, 11:24 PM
regeneration regeneration is offline
 
Join Date: Jun 2005
Posts: 7
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Got the same email.. twice.

The person trying to log into your account had the following IP address: 213.197.81.50

The person trying to log into your account had the following IP address: 203.113.117.139
Reply With Quote
  #19  
Old 05-28-2011, 11:24 PM
Xplorer4x4 Xplorer4x4 is offline
 
Join Date: Apr 2005
Posts: 938
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Not sure if I need to report this or not, but my account was locked out as some one was trying to guess/hack my password. I have updated it to something a little bit more secure just to be safe. The IP reported in the email was 122.225.100.5 which traces back to china.

I realize this isnt relevant to this forum btw, but no where else an unlicensed member can post that I know of.
Reply With Quote
  #20  
Old 05-28-2011, 11:28 PM
regeneration regeneration is offline
 
Join Date: Jun 2005
Posts: 7
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default
Got the same emails.

You can't do anything. vB.org admins should disable the "Member list" feature:

https://vborg.vbsupport.ru/memberlist.php

Bots are taking usernames from that list and using brute force attack on this site.

I sent a PM to the admins about this.
Reply With Quote
Reply
Page 2 of 7 1 2 34 Last »

« Previous Thread | Next Thread »

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT. The time now is 05:35 AM.

Contact Us - Archive - Top

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.06852 seconds
  • Memory Usage 2,249KB
  • Queries Executed 13 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (2)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 
Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_postinfo_query
  • fetch_postinfo
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete