Illegal Logins / Failed Login Notification notification

**Boots** · 02-18-15, 09:25 AM

We have been receiving a lot of attention coming out of China lately. It seems that spam bots have been trying to use brute force to try to crack our members passwords. If you have received a "Failed Login Notification email", then they have tried to hack your account. Please so not worry, the software is responding the way it should. If your password id a good password you have nothing to worry about- the vBulletin software and the 15 minute lockout prevents "brute force" attacks from being successful.

They are probably trying the 5 most common password such as:

1) your username
2) password
3) 1234
4) 12345
5) 123456

If you password is any of the above (or close to it) you should change it to a real password ASAP. Also if you receive any PM's that seem out of the ordinary, please do not open any links and report the PM so we can look into the problem. Thanks.

**millertime89** · 02-18-15, 10:14 AM

This is extremely important guys. Yes this forum doesn't have any sensitive information (hopefully) saved in your account, but once they have access to your account they will probably try and get access to your email as your email address is listed on your profile. Your password doesn't have to be something fancy, it could be as easy as your favorite food with a number substituted for a letter. For example "Chocolat3". Ideally you'll use at least an upper case letter, a lower case letter, and a number.

**Boots** · 02-18-15, 10:40 AM

I once had a friend crack my password in 43 seconds as I was using a dictionary word. Once I added in numbers and a special character it was estimated that it would take up to 6 weeks to crack the password. Of course there was no restriction on the number of attempts and his computer was on the network. So including a ! or ? somewhere in the password is also a good idea. The harder passwords are to crack the better of course.

krn1010 · 02-20-15, 08:14 PM

Yah I got the mail as well o__O

**millertime89** · 04-07-15, 03:34 PM

Bumpity bump since this seems to have happened again.

SnoopySnake · 05-02-15, 09:23 AM

Got this PM today, just a heads up...

Ballchris · 05-02-15, 09:55 AM

i got the same PM

SSSSnakes · 05-02-15, 10:03 AM

Quote:

Originally Posted by Ballchris

i got the same PM

Add me to the list. I got the same PM

**Boots** · 05-02-15, 10:37 AM

Yeah, they even sent it to me. Seems they are still tying and succeeding to find members with weak passwords. I have reset his password, but the PM's are all ready sent.

Jason

**Minkness** · 05-02-15, 10:45 AM

That sucks. =(

I got hit too. Thanks for being quick on it Boots!

CK SandBoas · 05-02-15, 10:47 AM

I got it as well, but I deleted it as soon as I saw it

Charis · 05-02-15, 11:28 AM

I also got that PM. Interestingly, this is the only forum that I've ever gotten spam PMs from.

**millertime89** · 05-03-15, 08:55 PM

Quote:

Originally Posted by Charis

I also got that PM. Interestingly, this is the only forum that I've ever gotten spam PMs from.

I'm jealous. I don't think I've been on a single forum that I haven't gotten them from.

TxScarlet15 · 05-06-15, 10:44 AM

Quote:

Originally Posted by SnoopySnake

Got this PM today, just a heads up...

I got the same message a couple days ago. I also got an email notification a month ago of a failed login attempt, tried to change my password after that but couldn't figure out how.

**Aaron_S** · 05-06-15, 11:26 AM

Quote:

Originally Posted by millertime89

I'm jealous. I don't think I've been on a single forum that I haven't gotten them from.

Maybe this is your fault.