Too many bad login attempts
Moderator: needmore
- boonut
- Posts: 1794
- Joined: Mon Oct 10, 2005 1:19 pm
- Location info: 20
- Location: Harlingen, TX Zone 10, Sunset Zone 27. 33' above sea level. 27 inches of rain/year. 22 Miles to the Laguna Madre. 27 miles to the Gulf of Mexico. 17 miles from Mexico. Lower Rio Grande Valley - Deep South Texas
- Contact:
Too many bad login attempts
I am getting regular "too many bad log in attempts" screens come up when I try to log in. I have to enter additional information. I am guessing that either this is a new security modification... or someone is trying to hack into my account. Suggestions?
- David
- Posts: 1495
- Joined: Fri Jan 13, 2006 6:42 pm
- Location info: 30
- Location: Middle Tennessee (Murfreesboro) USDA Zone 6b/7a Record low Jan 1966 -14*F Frost free April 21-Oct.21
- Contact:
Re: Too many bad login attempts
Hello Allen and All
Several of us are having the same problem. Someone is trying to hack the site by guessing someone's/anyone's password. So far as I know they have not been successful. Make sure your password is strong and just validate when asked. Maybe this guy will get tired of trying. He's not much of a hacker if this is his only strategy.
We have had several new members sign up and post a few times, then change their signature line to a sales web site link. I have banned and deleted all of these spammers as they are discovered, and have started banning the source IP. Maybe it's a disgruntled banned or deleted member, but it seems like a lot of trouble just to get back at us.
The only way to look at login attempts is to look at the database and I do not have the skills necessary to do that. Bill is looking into that situation, and maybe he will have something to report later. He also mentioned installing an update so I'm sure he will get things worked out.
If anyone notices signature lines with sales web site links (member bamboo nurseries or bamboo sales sites are OK) be sure to let Bill, Brad or myself know and we will zap them.
Regards to all, and Happy New Year!
David
Several of us are having the same problem. Someone is trying to hack the site by guessing someone's/anyone's password. So far as I know they have not been successful. Make sure your password is strong and just validate when asked. Maybe this guy will get tired of trying. He's not much of a hacker if this is his only strategy.
We have had several new members sign up and post a few times, then change their signature line to a sales web site link. I have banned and deleted all of these spammers as they are discovered, and have started banning the source IP. Maybe it's a disgruntled banned or deleted member, but it seems like a lot of trouble just to get back at us.
The only way to look at login attempts is to look at the database and I do not have the skills necessary to do that. Bill is looking into that situation, and maybe he will have something to report later. He also mentioned installing an update so I'm sure he will get things worked out.
If anyone notices signature lines with sales web site links (member bamboo nurseries or bamboo sales sites are OK) be sure to let Bill, Brad or myself know and we will zap them.
Regards to all, and Happy New Year!
David
David Arnold
Middle Tennessee Bamboo Farm
USDA zone 6b
Middle Tennessee Bamboo Farm
USDA zone 6b
- foxd
- Posts: 3221
- Joined: Wed Feb 09, 2005 7:30 pm
- Location info: 21
- Bamboo Society Membership: ABS - America
- Location: Zone 5b/6a Bloomington, INElevation: 770-790 feet
Re: Too many bad login attempts
My work email shows the IP Address of where I last logged in from, maybe something similar could be done showing the IP Address of where the last login attempt came from.
Southern Indiana.
My Bamboo List.
The legal issues that will arise when the undead walk the earth are legion, and addressing them all is well beyond what could reasonably be accomplished in this brief Essay. Indeed, a complete treatment of the tax issues alone would require several volumes.
My Bamboo List.
The legal issues that will arise when the undead walk the earth are legion, and addressing them all is well beyond what could reasonably be accomplished in this brief Essay. Indeed, a complete treatment of the tax issues alone would require several volumes.
-
- Posts: 1873
- Joined: Thu Jul 19, 2007 12:20 am
- Location info: 26
- Location: Kerby, OR
- Contact:
Re: Too many bad login attempts
Poor Bill! It never ends! He is lucky to have the group of you helping out!
- bambooweb
- Site Admin
- Posts: 1583
- Joined: Thu Jan 01, 1970 12:00 am
- Location info: 1
- Bamboo Society Membership: ABS - America
- Location: Zone 5 in WA State
- Contact:
Re: Too many bad login attempts
I finally got the update working on the test site.
I will update this site on Sunday and hopefully it will be down for less than an hour.
Bill
I will update this site on Sunday and hopefully it will be down for less than an hour.
Bill
- foxd
- Posts: 3221
- Joined: Wed Feb 09, 2005 7:30 pm
- Location info: 21
- Bamboo Society Membership: ABS - America
- Location: Zone 5b/6a Bloomington, INElevation: 770-790 feet
Re: Too many bad login attempts
I had a wild thought. Have the failed logins look like they are successful and take them to a fake site that looks just like the real site to see what they do to it.
Of course you woud have to give some visual indication that the login had actually failed, like a warning printed in an image file so that an automated scan of the page wouldn't see it.
Of course you woud have to give some visual indication that the login had actually failed, like a warning printed in an image file so that an automated scan of the page wouldn't see it.
Southern Indiana.
My Bamboo List.
The legal issues that will arise when the undead walk the earth are legion, and addressing them all is well beyond what could reasonably be accomplished in this brief Essay. Indeed, a complete treatment of the tax issues alone would require several volumes.
My Bamboo List.
The legal issues that will arise when the undead walk the earth are legion, and addressing them all is well beyond what could reasonably be accomplished in this brief Essay. Indeed, a complete treatment of the tax issues alone would require several volumes.
- bambooweb
- Site Admin
- Posts: 1583
- Joined: Thu Jan 01, 1970 12:00 am
- Location info: 1
- Bamboo Society Membership: ABS - America
- Location: Zone 5 in WA State
- Contact:
Re: Too many bad login attempts
I finished updating the site software and I lowered the Maximum login attempts to 1. It does not look like they are trying to log in after the captcha shows up so hopefully they notice that they only get one chance and move on.
In the mean time it looks like we will have to enter the captcha code. I will see if I can add code to get their IP and ban it.
Bill
In the mean time it looks like we will have to enter the captcha code. I will see if I can add code to get their IP and ban it.
Bill