MyBB Community Forums

I think some of these people are just curious telling from the input.

EuroBEAT Wrote:

Protoman Wrote:Unfortunately, chances are, they used a proxy.

You are probably right. As a matter of fact I had some "suspicious" registration from the same provider but different ip.

Here is the information from ARIN on this provider:

Quote:OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 85.0.0.0 - 85.255.255.255
CIDR: 85.0.0.0/8
NetName: 85-RIPE
NetHandle: NET-85-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: NS3.NIC.FR
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: SUNIC.SUNET.SE
NameServer: TINNIE.ARIN.NET
NameServer: NS.LACNIC.NET
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2004-04-01
Updated: 2004-04-06

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam
StateProv:
PostalCode: 1001EB
Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 217.0.0.0 - 217.255.255.255
CIDR: 217.0.0.0/8
NetName: 217-RIPE
NetHandle: NET-217-0-0-0-1
Parent:
NetType: Allocated to RIPE NCC
NameServer: NS-PRI.RIPE.NET
NameServer: NS3.NIC.FR
NameServer: SUNIC.SUNET.SE
NameServer: NS-EXT.ISC.ORG
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
Comment: These addresses have been further assigned to users in
Comment: the RIPE NCC region. Contact information can be found in
Comment: the RIPE database at http://www.ripe.net/whois
RegDate: 2000-06-05
Updated: 2005-07-27

# ARIN WHOIS database, last updated 2006-06-30 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

As you see they cover totally different IP rangers and some of the mwere mentioned on another posts here. It seems that might be the proxy.

EB

Hey EURObeat, my admincp got hacked by 87.74.132.94 and i got the same info when i looked up the IP I immediately changed my password and changed the name of my admin directory..... The guy managed to hack in and tried to change my default template.... luckly, i got online and managed to stop him

pritthish Wrote:Hey EURObeat, my admincp got hacked by 87.74.132.94 and i got the same info when i looked up the IP I immediately changed my password and changed the name of my admin directory..... The guy managed to hack in and tried to change my default template.... luckly, i got online and managed to stop him

Out of curiosity, what ver of MyBB you were running at the time of attack?
After the attack on my board, I actually also renamed /admin dir as a additional precaution, and I suggest you to do the same (one of php file has to be updated with the new directory name though, but I don't remember which one was that. Anyone?). I still have no upgraded to 1.2 and I am running 1.1.8 but no attack that succeeded at this point.

EB

DOS'ing servers
71.233.49.252


plus others
89.146.135.134

65.167.15.26

196.202.24.79

193.77.49.118

70.67.42.178

89.146.144.105

89.146.149.150

65.43.209.255

deny from 70.67.42.178
deny from 89.146.135.134
deny from 65.167.15.26
deny from 196.202.24.79
deny from 193.77.49.118
deny from 69.173.40.227
deny from 88.73.212.96
deny from 88.229.213.163
deny from 82.167.32.27
deny from 67.172.237.235
deny from 71.199.44.115
deny from 89.52.94.53
deny from 70.177.65.92
deny from 68.1.124.66
deny from 84.132.81.223
deny from 60.240.138.176
deny from 89.146.144.105
deny from 89.146.149.150
deny from 193.77.49.118
deny from 70.67.42.178
deny from 89.146.144.105
deny from 89.146.149.150
deny from 65.43.209.255
deny from 81.202.129.105
deny from 74.34.129.217
deny from 71.104.210.22
deny from 74.34.129.217
deny from 69.163.30.161
deny from 88.72.251.241

his msn Lightning4224@hotmail. com

Another one for you all

81.213.112.113

also ban

Quote:turkhackerteam.org

i think all are baby hackers down here, using some softwares to hack. basically i work as a security administrator. see these type of hackers are learning. real hackers erase down the logs file created by firewalls for not being traced.

willow Wrote:hacked.

165.21.154.14
165.21.154.13
165.21.154.17

220.255.132.80

my hotmail and ebay accounts both got hacked, i got the ebay one back but i'm still waiting on my hotmail!! fingers crossed
this is the IP and ISP that were left on my ebay account

IP address: 123.114.227.102
ISP host: 10.11.64.251

Good idea for a thread, however people should be wary about just banning an IP that is shown.

Some people may be convinced that someone in particular hacked them and post the offending IP here, when in fact they weren't guilty at all.

Yeah, zombie computers... >_>