Investigate repeated failed login attempts on Lensflare account from multiple IPs #107

New Issue
Closed
opened 2026-07-18 14:11:39 +02:00 by retoor · 0 comments
retoor commented 2026-07-18 14:11:39 +02:00
Owner
Copy Link

Summary

The user account 'Lensflare' (email: lensflare@gmx.de) has experienced repeated failed login attempts from at least 3 different IP addresses over multiple days. The reporter suggests this could be a forgotten password, a targeted brute-force attack, or credential stuffing. The user is also a DM conversation partner with admin-level security concerns and should be notified if an attack is suspected.

Steps to Reproduce

Not provided.

Expected Behaviour

Not provided.

Actual Behaviour

  1. On 2026-07-17 at 15:34, 2 failed login attempts were made from an iPhone Brave browser using IPv6 address 2003:d7:6f0c:f100:ecf9:f9de:f69a:1c6a.
  2. On 2026-07-16 at 10:23, 2 failed login attempts were made from an iPhone Brave browser using IPv4 address 79.195.204.101.
  3. Total of 4 failed attempts over 2 days from 2 different geographic locations.

Environment

  • Account: Lensflare (lensflare@gmx.de)
  • Browsers: iPhone Brave (both attempts)
  • IPs: 2003:d7:6f0c:f100:ecf9:f9de:f69a:1c6a (IPv6) and 79.195.204.101 (IPv4)

Reported by retoor via DevPlace.

## Summary The user account 'Lensflare' (email: lensflare@gmx.de) has experienced repeated failed login attempts from at least 3 different IP addresses over multiple days. The reporter suggests this could be a forgotten password, a targeted brute-force attack, or credential stuffing. The user is also a DM conversation partner with admin-level security concerns and should be notified if an attack is suspected. ## Steps to Reproduce Not provided. ## Expected Behaviour Not provided. ## Actual Behaviour 1. On 2026-07-17 at 15:34, 2 failed login attempts were made from an iPhone Brave browser using IPv6 address 2003:d7:6f0c:f100:ecf9:f9de:f69a:1c6a. 2. On 2026-07-16 at 10:23, 2 failed login attempts were made from an iPhone Brave browser using IPv4 address 79.195.204.101. 3. Total of 4 failed attempts over 2 days from 2 different geographic locations. ## Environment - Account: Lensflare (lensflare@gmx.de) - Browsers: iPhone Brave (both attempts) - IPs: 2003:d7:6f0c:f100:ecf9:f9de:f69a:1c6a (IPv6) and 79.195.204.101 (IPv4) --- *Reported by **retoor** via DevPlace.*
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
No items
No Label
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: retoor/devplacepy#107
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?