Failed log-in attempts?

[andy]

Hi, guys.

I've just received the second EAB e-mail (one last night, too) saying that attempts had been made to log-in to my account. I changed my password this morning after seeing the first message and am fairly surprised to see it happen again.

Fortunately, I don't use repeat passwords (or passwords like 'password'*!), so that's hopefully not inviting problems elsewhere; but I'm wondering if it's happening to anyone else and if there could be any hiccoughs if I change my EAB password each day until things settle down?

Also, what's the best course of action? Stay logged-in? Log out? Leave the password or change it after each notification and remain logged-in... or out?

For what it's worth, perhaps unsurprisingly, the IPs aren't local - one's in China, one is a Philippines address.

Grrh!

P.S. *Nor 'password1'!

[TCD]

Probably bots that don't react to the 'username not available' error. I would choose a long and complex PW for the time that you get these messages and not care about it too much.

[andy]

Thanks, TCD!

As my tired and painkiller-induced silliness might have suggested, my passwords are usually complex and in most cases, also quite long (if only I could get other people to do the same!). Anyway, there's nothing to worry about there but it's good to have a second opinion - particularly when it's very probably more informed and when I'm feeling so rough just now.

Thank you again.

[TCD]

No problem Not sure what happens if someone tries too often to log in, but hopefully one of the GMs can clearify that bit.

[andy]

According to the e-mail...

Originally Posted by EAB e-mail

This person has been prevented from attempting to login to your account for the next 15 minutes.

[TCD]

Good to know that

[DH]

I'm sure the more you fail, or someone else does, to log on, the time delay increases. Presumably the first and second attempt doesn't get reported 'cause I've done that by accident, but thereafter it looks like you get an email notification.

I would get RCK to change your username to something slightly different, keep the andy bit but add something extra at the end. This will prevent whoever it is from making the attempt again.

You'll have to PM RCK to do this but it won't happen straight away, he doesn't always bless EAB as frequent as we would like

[andy]

I found a few more notification messages this evening (two with a similar IP; I'll have to check the others). My first thought echoed your own, DH. Shame I didn't start the name at z, too - end of the dictionary 'n' all that! Only kidding. I wouldn't want anyone else to have this nonsense happening to them. Hmm, I'll have to chuck a few numbers on, use a '.' or something...

I'll PM RCK when I can, I suppose. I know it might take a while from when I asked to have my account refreshed/re-enabled earlier this year. No prob, it'll be sorted when it's sorted.

I just hope that it doesn't cause any problems with either my account or EAB in the meantime. Bots or not, it's irritating that we can't 'just be' and have to put up with such hassles.