Password attack on the board

[DH]

Originally Posted by FOL

The only problem with black listing, is if there is a proper user on a ip sharing isp. Then they get blocked too, .

It's a tough world, and prevention is better than cure if it manages to gain access.

Originally Posted by Marcuz

And if he does, what, he has simply access to the EAB account of a member?

Yes, indeed, think spammer, think ographic spammer (including child), destruction to large quantities of posts/threads, eventual ban because we all think Joe Bloggs has gone crazy. let alone access to a password that could be used on other sites, the email, other personal info etc.

I know it's unlikely that they'll get in, but if you leave anything long enough, someone will eventually manage to open up a door somewhere, it's a fact of life.

EDIT: These IP's and ranges have been reported to have been making login attempts around the world, even if they manage 1 account access out of 10 million account attempts will probably be some kind of triumph. Also, because I have been watching all of this happening live over the past few days, tonight is the first night, I haven't seen an attempted failed login.

[alenppc]

Here we go again: 188.143.232.144

[Alexco]

Me too, for the second time:

Dear Alexco,

Someone has tried to log into your account on English Amiga Board with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.

The person trying to log into your account had the following IP address: 188.143.232.144

All the best,
English Amiga Board

[DH]

It's OK, we also know about some of these other IP ranges, These have also been checked against EAB members to make sure we don't affect genuine members, so just give a little time for RCK to check himself before blacklisting these ranges too

[john1979]

They are just forum bots, looking for known exploits and easy passwords. There's no actual human there, trying different passwords at a keyboard.

[DH]

We are already well aware of what they are john1979

It's the fact that we have suddenly been targeted and bombarded by these attempts, which is worrying some of our members, so we need to be doing something.

As I've said previously:-

Originally Posted by DH

Also, my advice to anyone who is unsure of how secure their password is, should change it immediately making it a minimum of 8 characters containing a mixture of usable characters, some capitalised, and at least 1 number.