retoor/devplacepy
1
0
Fork 1
Code Issues 44 Pull Requests 4 Actions Packages Projects Releases Wiki Activity

Investigate repeated failed login attempts on Lensflare account from multiple IPs #107

New Issue
Closed
opened 2026-07-18 14:11:39 +02:00 by retoor · 0 comments
retoor commented 2026-07-18 14:11:39 +02:00
Owner
Copy Link
Copy Source

Summary

The user account 'Lensflare' (email: lensflare@gmx.de) has experienced repeated failed login attempts from at least 3 different IP addresses over multiple days. The reporter suggests this could be a forgotten password, a targeted brute-force attack, or credential stuffing. The user is also a DM conversation partner with admin-level security concerns and should be notified if an attack is suspected.

Steps to Reproduce

Not provided.

Expected Behaviour

Not provided.

Actual Behaviour

  1. On 2026-07-17 at 15:34, 2 failed login attempts were made from an iPhone Brave browser using IPv6 address 2003:d7:6f0c:f100:ecf9:f9de:f69a:1c6a.
  2. On 2026-07-16 at 10:23, 2 failed login attempts were made from an iPhone Brave browser using IPv4 address 79.195.204.101.
  3. Total of 4 failed attempts over 2 days from 2 different geographic locations.

Environment

  • Account: Lensflare (lensflare@gmx.de)
  • Browsers: iPhone Brave (both attempts)
  • IPs: 2003:d7:6f0c:f100:ecf9:f9de:f69a:1c6a (IPv6) and 79.195.204.101 (IPv4)

Reported by retoor via DevPlace.

## Summary The user account 'Lensflare' (email: lensflare@gmx.de) has experienced repeated failed login attempts from at least 3 different IP addresses over multiple days. The reporter suggests this could be a forgotten password, a targeted brute-force attack, or credential stuffing. The user is also a DM conversation partner with admin-level security concerns and should be notified if an attack is suspected. ## Steps to Reproduce Not provided. ## Expected Behaviour Not provided. ## Actual Behaviour 1. On 2026-07-17 at 15:34, 2 failed login attempts were made from an iPhone Brave browser using IPv6 address 2003:d7:6f0c:f100:ecf9:f9de:f69a:1c6a. 2. On 2026-07-16 at 10:23, 2 failed login attempts were made from an iPhone Brave browser using IPv4 address 79.195.204.101. 3. Total of 4 failed attempts over 2 days from 2 different geographic locations. ## Environment - Account: Lensflare (lensflare@gmx.de) - Browsers: iPhone Brave (both attempts) - IPs: 2003:d7:6f0c:f100:ecf9:f9de:f69a:1c6a (IPv6) and 79.195.204.101 (IPv4) --- *Reported by **retoor** via DevPlace.*
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
typosaurus retoor
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: retoor/devplacepy#107