logon attempts from 62.252.64.31

[bamabama]

Zaph,
You are quick ! many thanks.

Not vBulletin defaults. The board in question is coded correctly to record real IP addresses not the cacheing proxy address I am told.
5 invalid passwords and the auto e-mail gets fired off - thats what happened.

later today I will perform a simple practical test which will confirm that board in question is working like this.

will get back with results after testing.

[Stuart]

Originally Posted by bamabama

One of the boards I used regularly sent me an email.
Account suspended through 5 failed logon attempts. It wasn't me, I was not even in the house !).
Attempted logon came from 62.252.64.31 which is
lutn-cache-10.server.ntli.net
the DCHP server I am actually using is close to the address (.21) and is
lutn-sacmdhcp-1b.server.ntli.net
My IP address is, of course, miles away from either of these (and the lease has been valid from 11 a.m today).

This is all very strange - and slightly worrying...
.

Actually, the proxy you posted this from is 62.252.64.32 according to our records.

To eliminate the proxy, just try another..

You can manually specify one using the instructions at : http://www.cableforum.co.uk/forum/article.php?a=21

There is a list of proxies at: http://www.cableforum.co.uk/forum/article.php?a=10

[bamabama]

Stuart,
You a Mod from the board in question ? ? (there is a Stuart there too).

Curiouser and curiouser...though

Paste of email contents-----
"Your account on XXXX Forums has been locked because someone has tried to log into the account with the wrong password more than 5 times. You will be able to attempt to log in again in another 15 minutes.

The person trying to log into your account had the following IP address: 62.252.64.31

Don't forget that the password is case sensitive. Forgotten your password? Use the link below:"
----------------------------
not the .32 address. But then again I doubt that NTL run just one proxy, at least I hope so.

I did a practical test on the board in question and used invalid passwords enough to suspend myself. The automated e-mail promptly arrived and it shows the NTL cacheing proxy as the source address, NOT my real IP address. Changing my proxy will not alter this.
Advice from the board in question was obviously off-target. It does not record the real IP address. Sorry I passed on the misleading statement - at least I checked and have corrected things now.
Kudos to the guys here who nailed it.

[Stuart]

Originally Posted by bamabama

Stuart,
You a Mod from the board in question ? ? (there is a Stuart there too).

Nope, only mod this forum... Unless Digital Spy, mybulldoghell or VForum have promoted me without telling me.