4 replies to this topic

[chief]

I'm going to bring this out into the public because everyone needs to know this. As of yesterday FUS became under attack from multiple IP's trying to log into user accounts. The attack is still going on, the list of IP's is in the hundreds, and around 80 accounts have had people attempt to enter them.

Right now there is nothing really to worry about as the IP board seems to be doing its job and is currently blocking all the foreign IP's that fail to log into user accounts. However this is not to say all is well. If your user password is simple I suggest changing it to something a little more complex. Toss a few letters and numbers into it.

Also for all mods and admins, I'm putting out a mandatory call for you all to change your passwords to something a lot more complex. Last we need is one of our accounts being hacked into.


Currently at the time I'm at a loss of what to do. The IP's are coming from all over the world and there is no way that I can see to stop this. At the moment I'm talking things over with Bakuda and trying to figure something out. If anyone here is familiar with this sort of attack and know what to do please PM or email me at Paul@SonicSatAM.com.

[DLTN]

Noted and changed my password, thanks for the heads up.

[chief]

So after some looking this is just a simple Brute Force attack. What it is is bots try to get into accounts by just.. Well using brute force and choosing random passwords and so on. Apparently in recent months its been a fairly common thing on IPB boards such as ours. Luckily IPB has a ton of security and can easily defend its self. One of the main reasons why we chose IPB and got a fully licensed copy that we pay yearly for.

IPB auto blocks IP addresses that constantly try to get into user accounts, protects user cookies and so on. That way even if you have a auto log on (like me) no one can steal your cookies and gain access.


Regardless of all this security the bots are kinda annoying and cause some accounts to be locked out for 15 minute periods (after 3 failed attempts it goes into security mode). At the moment we are looking into putting a Captcha up along side your log in. This might be a bit annoying, but consider it just one extra security attempt to make FUS a safe forum for you and your DATA.

[saber16]

My account is always signed in, but I changed the password regardless.

[Inhibitor]

Password changed, thanks for the heads-up.