Announcement

Collapse
No announcement yet.

Weird log in attempts

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Weird log in attempts

    I was checking my login log the other day and I've noticed several weird log in attempts. They have some common characteristics:

    All of them are using user names with 4 or 5 letters (incomprehensible, just random letters), they all try to log in to the Forum (not the AdminCP) and they all come from weird IPs (located in China, Japan, Russia, South America but also US).

    Some of the most ... active IPs are:

    200.21.168.45
    210.62.72.211
    212.187.177.142
    219.141.223.177
    etc.

    Has anyone else noticed this?

    Also, I have some other weird log in attempts, where the following string is used as a user name (spaces added to avoid replacement):

    Code:
    [SIZE=-1][u r l = h t t p : / / [U]x6qv8rvl[/U].nm.ru/map.html]map[ / u r l ]
    [/SIZE]


    The underlined part of the URL is changing, never seen the same more than once.

    Anyone has noticed that?

    So far, I've been manually entering those weird IP addresses in the banned IP list, any other way to deal with them?

    Any help will be appreciated.

    John Caradimas

  • #2
    All you can do is continue banning them.
    Steve Machol, former vBulletin Customer Support Manager (and NOT retired!)
    Change CKEditor Colors to Match Style (for 4.1.4 and above)

    Steve Machol Photography


    Mankind is the only creature smart enough to know its own history, and dumb enough to ignore it.


    Comment


    • #3
      Thanks Steve, much appreciated.
      John Caradimas

      Comment


      • #4
        These are the links I get and some redirects.

        ----*EDIT*----------
        Decided to place image instead of clickable links

        Last edited by Jose Amaral Rego; Mon 23 Apr '07, 10:47am.

        Comment


        • #5
          How do you check log-in attempts?

          Comment

          widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
          Working...
          X