Warning Emails

[DirtRider]

Since I have sold my VB licence I keep getting loads of these mails

Dear DirtRider,

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 195.199.173.201

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:
https://vborg.vbsupport.ru/login.php?do=lostpw

All the best,
vBulletin.org Forum

[SyrLinus]

It's likely due to Heartbleed. Someone is trying to compromise the site.

[ssoc]

In the last 2 days I too have received around 20 of these emails.
I have just changed my password to something more secure just to be on the safe side, but I hope vBulletin are looking into this.

The first load of logins attempts were on Wednesday night, and then tonight (thursday) they started coming through again.

The person/bot that is trying to login to my account must be using a proxy as the logged IP address changes on each login attempt. I did search a few of the IP's and most of them seem to be in China.

[Max Taxable]

Originally Posted by SyrLinus

It's likely due to Heartbleed. Someone is trying to compromise the site.

Total nonsense. What's generating these emails is the work of just a typical dumbass, script kiddie running a brute force password cracker such as Brutus.

The "heartbleed" exploit is totally unrelated to this and is completely unrelated to vBulletin.

[Kirschtorte]

Originally Posted by ssoc

In the last 2 days I too have received around 20 of these emails.

Me too.

Originally Posted by ssoc

I did search a few of the IP's and most of them seem to be in China.

I agree.

[Areku]

Im in too ((

[Raphaelx]

The person trying to log into your account had the following IP address: 197.255.60.78
The person trying to log into your account had the following IP address: 183.220.233.153
The person trying to log into your account had the following IP address: 184.82.27.226
The person trying to log into your account had the following IP address: 177.129.157.1
The person trying to log into your account had the following IP address: 78.25.82.66
The person trying to log into your account had the following IP address: 223.83.129.198

[Brandon Sheley]

Originally Posted by SyrLinus

It's likely due to Heartbleed. Someone is trying to compromise the site.

These have been happening for years.. It wouldn't solely be on this new exploit IMO.

[recon2010]

Bulletin.org Forum webmaster@vbulletin.org

04:18 (6 hours ago)

to me
Dear recon2010,

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 113.190.253.180


-------------------------------------------------------------------->

vBulletin.org Forum webmaster@vbulletin.org

03:55 (6 hours ago)

to me
Dear recon2010,

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 187.65.84.96
----------------------------------------------------->

vBulletin.org Forum webmaster@vbulletin.org

03:54 (6 hours ago)

to me
Dear recon2010,

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 79.99.24.7

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:
https://vborg.vbsupport.ru/login.php?do=lostpw

All the best,
vBulletin.org Forum

-------------------------------->
vBulletin.org Forum webmaster@vbulletin.org

04:00 (6 hours ago)

to me
Dear recon2010,

Your account on vBulletin.org Forum has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 85.185.82.13
---------------------------------------------->

Need to do something. They attacking other vbulletin account sites too.

--------------- Added [DATE]1397201683[/DATE] at [TIME]1397201683[/TIME] ---------------

Need just shut down compromissed servers. If they not do it we use same cure in ddos.

[Chris27]

I've been receiving the same emails.

If this were related to Heartbleed the hacker would likely have our passwords already by pulling them out of the server's RAM and not trying to get in with a bunch of incorrect passwords.