CCBill Security
 

I recently joined one of my own sites to test something out. I joined via CCBill, got my email confirmation as a customer, plus my sale confirmation to the webmaster. That's all.

Less than 12 hours later Password Sentry blocked me for abuse of my user name. We set the block, right or wrong, at 4 IP addresses. I checked the logs and my user name had been used from 4 different countries in no time at all.

What the fuck? I deleted the mails as soon as I received them. I use Macs not PCs so should be pretty secure. So is CCBill that secure?

Has this happened to anyone else or do you have any thoughts on how it happened?

Was it an automatically generated username/password?

Interesting?

i dont think it cames from ccbill ....
i think there was an bruteforce attack with accessdiver or another programm using some wordlists with known users and passes

Could be. It wasn't and auto generated user/pass but nor was it my "usual". it's not the first time it's happened neither!

Still not absolutely 100% sure about CCBill's security!

Who do you host with?

so has this settled down or is it an ongoing problem, Geoff?

It's happened a couple of times, and just not with me but for ordinary members. We also have "friends" who we have set up manual memberships for and it's happened with those too. They are not regular site "joiners" and we have manually made up their user/pass. All very strange.

Our hosting is with http://adultfriendlyhosting.com. Been with them for nearly nine years now and they have always been 100% top notch!