Page 1 of 1
[Forum Bug] shows "exceeded max login attempts" on first try
Posted: Tue Feb 08, 2011 10:12 am
by cq75
It showed this the first time I logged in
Re: [Forum Bug] shows "exceeded max login attempts" on first
Posted: Tue Feb 08, 2011 3:29 pm
by wildweasel
This is getting alarmingly common; I get it on occasion and a number of other users have had it as well.
Re: [Forum Bug] shows "exceeded max login attempts" on first
Posted: Tue Feb 08, 2011 3:40 pm
by Jimmy
Happened to me on the Skulltag forums yesterday.
(Thanks for deleting my logins, Adobe Flash Update, you POS.)
Re: [Forum Bug] shows "exceeded max login attempts" on first
Posted: Tue Feb 08, 2011 4:22 pm
by randi
It's never happened to me, but I think it's a safe bet it's not a forum bug.
it is most probably spambots attempting to brute force their way into existing users' accounts,
nor is it unique to zdoom.org. Your best defense is to make sure you have a good password that isn't straight out of a dictionary.
Re: [Forum Bug] shows "exceeded max login attempts" on first
Posted: Tue Feb 08, 2011 8:26 pm
by cq75
My password is long and difficult, I don't think a bot will randomly guess it...
one thing strikes me as odd - they don't know my username yet, are the bots guessing random user names and passwords? Why not just click the login thing themselves and try all day?
Also, why bother trying to hack accounts on a zdoom forum anyway?

It's not like we have our bank accounts tied to our profiles.
Re: [Forum Bug] shows "exceeded max login attempts" on first
Posted: Tue Feb 08, 2011 8:31 pm
by InsanityBringer
It's reasonable that bots could easily just read through the forum, and pick up usernames from posts.
Re: [Forum Bug] shows "exceeded max login attempts" on first
Posted: Tue Feb 08, 2011 9:23 pm
by randi
cq75 wrote:Also, why bother trying to hack accounts on a zdoom forum anyway?

It's not like we have our bank accounts tied to our profiles.
Perhaps, they think spam posted by a legitimate user would get more hits than spam posted by some new user.
InsanityBringer wrote:It's reasonable that bots could easily just read through the forum, and pick up usernames from posts.
Most likely.
Re: [Forum Bug] shows "exceeded max login attempts" on first
Posted: Wed Feb 09, 2011 2:39 am
by Project Shadowcat
randy wrote:Perhaps, they think spam posted by a legitimate user would get more hits than spam posted by some new user.
With thanks to the familiarity of the user in general. In fact, the very fact that even if they get in, they're completely bypassing the CAPTCHA checks in the first place. If they're brute-forcing the users, isn't that illegal?