many attempted login password attempts by guests - best way to sop this ?

Started by aegersz, December 23, 2016, 08:59:18 PM

Previous topic - Next topic

aegersz

i get these errors too often and i suspect it's some Dictionary attempt for unauthorised access.

How can i stop them, please ? ... this is just a couple of the failed login attempts out of many.

Apply Filter: Only show the error messages of this member Guest
Apply Filter: Only show the error messages of this IP address 70.121.84.92   
Reverse chronological order of list Today at 11:44:03 AM
Apply Filter: Only show the error messages of this session 77bbd16e64dd3bc9b96e79d89cdb6c45
Apply Filter: Only show the errors of this type Type of error: User
Apply Filter: Only show the error messages of this URLhttps://forum.drugs-and-users.org/index.php?action=login2Apply Filter: Only show the errors with the same message[b]Password incorrect - deedle
[/b]
Apply Filter: Only show the error messages of this member Guest
Apply Filter: Only show the error messages of this IP address 70.121.84.92   
Reverse chronological order of list Today at 11:43:55 AM
Apply Filter: Only show the error messages of this session a1178aca1ca14411cdd3a08730b4e6c0
Apply Filter: Only show the errors of this type Type of error: User
Apply Filter: Only show the error messages of this URLhttps://forum.drugs-and-users.org/index.php?PHPSESSID=6oq3vu648ukcpec73ibrlcgd91&action=login2Apply Filter: Only show the errors with the same message[b]Password incorrect - deedle[/b]

Guest
Apply Filter: Only show the error messages of this IP address 173.31.209.220   
Reverse chronological order of list Today at 06:51:20 AM
Apply Filter: Only show the error messages of this session 647c3c6f835ab8544de2045c2ea1b6c4
Apply Filter: Only show the errors of this type Type of error: User
Apply Filter: Only show the error messages of this URLhttps://forum.drugs-and-users.org/index.php?PHPSESSID=v46hn464gl0j4qaiod72g4sqp6&action=login2Apply Filter: Only show the errors with the same message[b]Password incorrect - LadyH
[/b]
The configuration of my Linux VPS (SMF 2.0 with 160+ mods & some assorted manual tweaks) can be found here and notes on my mods can be found here (warning: those links will take you to a drug related forum). My (House) music DJ dedication page is here

Sir Osis of Liver

Those are not guest errors, they're from registered members.  Login attempts by guests are not logged.  If someone is using legit membernames to attempt login, and they're all from the same IPs, you can block them with .htaccess.
Ashes and diamonds, foe and friend,
 we were all equal in the end.

                                     - R. Waters

aegersz

Oh dear. I just had trouble believing that my members are that loose :) ... but many may be intoxicated, for real !

that's good to hear and sorry for wasting your time then.

will mark resolved and will def. take up your .htaccess suggestion if i see many attempts from the same IP.
The configuration of my Linux VPS (SMF 2.0 with 160+ mods & some assorted manual tweaks) can be found here and notes on my mods can be found here (warning: those links will take you to a drug related forum). My (House) music DJ dedication page is here

Jailer

A cached bad password will produced the same type of errors. I have one member on my forum that produces an error every time he logs in. I've tried explaining why it happens and how to fix it but he just doesn't get it.

Advertisement: