Account locked?

[BirdOPrey5]

Originally Posted by Hoffi

The attempts to hack accounts raises. Please hurry to check the IP's.

There is no point to checking/blocking IPs. These IPs are of "Zombie" PCs- they are your friends/neighbors/random people who have been infected with viruses and are now running the commands of hackers. There are millions of them out there and there is no point to try to block them all- they are always changing.

The easiest thing to do is simply delete the emails and continue on with your life.

PS- You're never actually locked out- the lock follows the IP address not the username, so you would always be able to log in so long as the attack isn't coming from your IP address.

[Jaydee 2]

I agree! About 50 emails between 10.15 and 10.21! (German local time -> 08.15 UTC)

Originally Posted by ForceHSS

They never try my account

Am i to?

--------------- Added [DATE]1397121364[/DATE] at [TIME]1397121364[/TIME] ---------------

Originally Posted by BirdOPrey5

The easiest thing to do is simply delete the emails and continue on with your life.

Hehe, first i read "[...] and continue on with your wife."

[Electronic Punk]

Hmm, also got this, account seems fine however.

[pets.ca]

I have gotten about 25 in the last 24 hours....

[sburns1992]

Yeah I keep getting loads, can I request a username change?

[TheLastSuperman]

Originally Posted by sburns1992

Yeah I keep getting loads, can I request a username change?

Sure however I cannot do it for you, you will need to send a private message to an Administrator on the site, here is a list of Staff I suggest Lynne or Princeton as Paul is away currently.

https://vborg.vbsupport.ru/info.php?do=staff

[BirdOPrey5]

Originally Posted by sburns1992

Yeah I keep getting loads, can I request a username change?

A username change likely won't do anything to stop the emails, in fact it will probably just make you get more as they will eventually stop with your account and move on to others.

[Sascha Henken]

I keep getting these emails several times a day. Seems a Bot Network is trying to hijacking forum accounts. I?ve managed to change my password to a more secure one!

Dear Sascha Henken,

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: XXX.XXX.XXX.XXX

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:
https://vborg.vbsupport.ru/login.php?do=lostpw

All the best,
vBulletin.org Forum

[teou]

Massive bruteforcing attack obviously. I have also received several emails. IP addresses of the attackers so far:
80.191.193.2
177.129.88.39
201.211.196.23

Is there any way to disable email notifications at least?

p.s. Suggestion to vbulletin staff: make an option to have one screen/post name and another login name. Thus the attackers will not be able to get login names from posts and will have to bruteforce them first.. and that will greately enhance security and will stop this email spam.

p.p.s. Similar suggestion here - https://vborg.vbsupport.ru/showthrea...=264376&page=2
Using emails for login (only email and not both mail or username as many sites do). Must be pretty easy to implement, 1-2 rows of php here and there?

[BirdOPrey5]

We are not going to be making massive changes to the software, we do apologize for the inconvenience.

Some people have reported that editing your options and seeing unchecking the option to Allow Administrators to Send You Email stops the account locked emails, but other people say it does not help- honestly I'm not sure if that setting was ever intended to stop such emails since they technically are being sent from the board itself, not an Administrator.

For those who no longer wish to have accounts go ahead and change your emails address on record in the settings to some random/undeliverable value.