What to do if someone is trying to distributed brute force my account?

[tekram]

Here the same:

The person trying to log into your account had the following IP address: 222.173.42.106
The person trying to log into your account had the following IP address: 115.127.15.44

[Brandon Sheley]

same here...
95.154.98.152

seems like a problem is starting....

[Oblivion Knight]

..and here - 2 different IPs, identical times;
94.228.204.2
94.228.204.30

[Kesomir]

and here: 83.222.206.146 and 81.30.164.94

[Frosty]

Someone might have coded a bot, best thing would be to disable the member list, otherwise they can get the list of our usernames.

[Marv]

Happend to me also. Seems they attacked all accounts with 3 bruteforce attempts. That makes me worry about those, who have only one or two and not three recorded events. Could mean they were succesful with one of their attempts.

I guess there are a few users here, which have sent their logins from servers or admincps to others (i.e. to mod developers in times of support etc.) Something very unsecure, but I?m sure some did that. Would be wise to inform all users - and to force all vb.org members to setup a secure passphrase.

--------------- Added [DATE]1306661692[/DATE] at [TIME]1306661692[/TIME] ---------------

Originally Posted by Frosty

Someone might have coded a bot, best thing would be to disable the member list, otherwise they can get the list of our usernames.

Thats senseless. The bot can even read the threads or the WGO box etc. That makes no sense to disable the ML.

[Frosty]

True.. But memberlist contains offline members, while online box has only online members. But good point anyway.

Bigger damage can be done with the memberlist than with the online box.

[Marv]

Originally Posted by Frosty

True.. But memberlist contains offline members, while online box has only online members. But good point anyway.

Bigger damage can be done with the memberlist than with the online box.

You?re right, true. I was regarding this from a point of the bigger threatlevel. I suppose an inactive account has not or not really often PN?s in it. So the threatlevel isn?t that big.
All others, the active users, can be found in the threads here. And to programm a bot to get those accountnames is done in a blink of an eye. Whatever, disabling the ML could help with an additional benefit, even when it would be a very little one. But sometimes that makes a difference.

[Nukey]

I haven't logged on since Dec 2007 and just got the same email:
82.145.242.38
201.22.130.226

[Frosty]

IP's resolve to online proxies, which means this is a 100% automated attack.