Quote:
Originally Posted by blind-eddie
Everyone in the forum software world knows the file structure of many forum software including vbulletin.
We all know bots crawl our sites everyday, they know that every member account path is "member.php?u=".
Its really easy to start with 1 then 2 then 3 ....etc...at the end of "member.php?u=" and paste your name in the login box and use a random password to see if it works.
You then get the locked account email...so what, it was not you... you know that.
Change your password to a stronger password for shits and giggles just to be safe.
Many requesting to add ip's to ban list should do a little research, its a waste of time to ban ip's... getting a new ip is easy to do.
There is nothing that can be done to stop it from happening..no one is to blame for this happening.. there is nothing wrong with vbulletin software... welcome to the internet.
|
Very good post.
But.... vBorg could probably re-word the email message, making it say something like:
"We locked IP 123.456.789 out of login to your account, due to multiple failed attempts to log in. The login attempts failed but please insure you have a strong password."
Might save alot of this hand wringing every time this occurs.