Account locked?

[LeventX]

Originally Posted by Lynne

They did this last year also - Yesterday's brute force attempts at password hacking

Please make sure you do not use your username as your password.

Thank You

[LaBella]

Originally Posted by BirdOPrey5

They are hitting people who haven't logged in for 7 years... so it's not who's online. It was either a copy of the member's list (made before the attack) or a spider that just crawled the site and captured all the usernames. They would need to sort them anyway to prevent duplicates so it makes sense they are in alphabetical order.

They seem to have skipped accounts that start with a special character, like !username, so I'm not convinced they used the member's list as those names are on top.

I have certainly logged in more recently than 7 years??!:erm:

[Lynne]

He was simply saying they they are hitting those people who haven't logged in for 7 years.... along with those of us who logged in today.

[Ladybbird]

I see many of your members have experienced the same problems as I have had, and continue to do so. Your service responded quickly and stopped the hackers and advised me by many emails.

I dont have time to research and give your members all the IP addies that attempted to hack our accounts, but here are a few details to help you guys

Dear Ladybbird,
Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times.

Some of the people trying to log into my account had the following IP addresses:

84.22.28.242 - Bulgaria

78.130.136.18 - Bulgaria

194.141.252.102 - Bulgaria

2.133.92.138 - Kazakhstan

211.161.152.108 - China

72.29.4.111 - New Zealand

118.195.65.247 - China

58.252.56.148 - China

202.182.50.130 - Indonesia

Hope this helps in some way, and thank you vBe Forum for stopping the hackers.

[CableSux]

Originally Posted by BirdOPrey5

Just delete the emails and don't worry about it.

Make sure you have a decently secure password. Make sure your password is not your username or 12345 or the word "password" or anything else very common.

Even if it is just lol#101 the chances they figure that out in 10, or 100, or even 500 chances is near zero.

Perhaps you should add these suggestions to the e-mail template so the forum isn't inundated with posts with IPs and asking what to do? Just a thought.

[Amaury]

Originally Posted by Max Taxable

We don't know how long they keep us showing online though, and we also don't know when the brute force attackers are gathering their target lists. Could be minutes, hours, days? Between gathering the info and launching the attacks.

I only know I have never been targeted and also have never run visible here.

Session Timeout is set to 30 minutes here.

[K4GAP]

[quote=BirdOPrey5;2314376]I also am getting the lockout notice. Good thing I never log out***** snipped


What setting do I need to have so that I'm never logged out while my site is open in my browser?

--------------- Added [DATE]1371143135[/DATE] at [TIME]1371143135[/TIME] ---------------

One thing I've done is to limit anyone from accessing my site if they are not within the time zones I have selected.

[slinky]

And they are hitting me. I wonder how many others are being hit. Remember - change all your passwords everywhere since the people trying to hack in here may be trying to use the passwords that they got from the vBulletin database a few months ago.

[jake73]

Yeah... Just got hit, too.

[thomas]

Got seven such notifications today.