Enhancment Request: Multiple user login attempt from same IP

TAd · Posted: Wed Nov 21, 2007 6:37 am

A small request, but an important one. I would like to request the ability to ban an IP for either multiple user login attempts or new user registration attempts with the ability to select how many attempts are possible.

For instance, I will get a single IP trying to create 5 user accounts, or even the same IP attempting to login to multiple user accounts (none of which exist...yet) an obvious attempt to hack into a user account.

I would like the ability to Automatically ban these IP's after X amount of attempts to deter the use of that specific IP. To perform this manually is time consuming and I am not often online to ban them as it is occurring, so an automated system is the best bet for preventing repeated attacks.

Thank you for your time!

One of many examples:

User with IP tries this:

Code:

/modules.php?name=Forums&file=posting&mode=newtopic&f=31 2007-11-18 @ 00:41:33
/modules.php?name=Your_Account&redirect=posting&mode=newtopic&f=31 2007-11-18 @ 00:41:33
/modules.php?name=Your_Account&username=Boss_msgu&gfx_check=rxxH7rei&op=login 2007-11-18 @ 00:41:31
/modules.php?name=Your_Account&stop=1 2007-11-18 @ 00:41:31
/modules.php?name=Your_Account&redirect=posting&mode=newtopic&f=31 2007-11-18 @ 00:41:29
/modules.php?name=Forums&file=posting&mode=newtopic&f=31 2007-11-18 @ 00:41:28
/modules.php?name=Your_Account&username=Boss_msgu&gfx_check=xxxrxirx&op=login 2007-11-18 @ 00:41:27
/modules.php?name=Your_Account&stop=1 2007-11-18 @ 00:41:27
/modules.php?name=Your_Account&redirect=posting&mode=newtopic&f=31 2007-11-18 @ 00:41:25
/modules.php?name=Forums&file=posting&mode=newtopic&f=31 2007-11-18 @ 00:41:24
/modules.php?name=Your_Account&stop=1 2007-11-18 @ 00:41:23
/modules.php?name=Your_Account&username=Boss_msgu&gfx_check=Ir7I7is7&op=login 2007-11-18 @ 00:41:22
/modules.php?name=Forums&file=posting&mode=newtopic&f=31 2007-11-18 @ 00:41:20
/modules.php?name=Your_Account&redirect=posting&mode=newtopic&f=31 2007-11-18 @ 00:41:20
/modules.php?name=Forums&file=posting&mode=newtopic&f=31 2007-11-18 @ 00:41:18
/modules.php?name=Your_Account&redirect=posting&mode=newtopic&f=31 2007-11-18 @ 00:41:18
/modules.php?name=Your_Account&stop=1 2007-11-18 @ 00:41:17
/modules.php?name=Your_Account&username=Boss_msgu&gfx_check=7xx7irIr&op=login 2007-11-18 @ 00:41:16
/modules.php?name=Your_Account&username=Boss_msgu&user_email=tr@mysoftware.ru&op=new user 2007-11-18 @ 00:41:04
/modules.php?name=Your_Account&op=new_user 2007-11-18 @ 00:41:01
/modules.php?name=Forums&file=viewforum&f=31 2007-11-18 @ 00:41:00
/modules.php?name=Forums

Raven · Posted: Thu Nov 22, 2007 8:52 pm

Just to let you know that we have received your enhancement suggestion and will be looking into.

BobMarion · Posted: Sun Nov 25, 2007 10:40 pm

Will research best method to employ. Looks like the links used are trying to exploit old holes in nuke.

Susann · Posted: Mon Nov 26, 2007 2:33 am

Tad better ban e-mail addresses from mysoftware.ru, mail.ru, list.ru, bk.ru etc. because theses addresses are often used by spammers and spam bots.

Only registered users can see links on this board!
Get registered or login to the forums!