Go Back   FlashFXP Forums > FlashFXP > News
FlashFXP BETA Area / Password Guessing FlashFXP BETA Area / Password Guessing
Register Tickets Search Today's Posts Mark Forums Read

News All the latest News and Information

Reply
 
Thread Tools Rate Thread
Old 12-09-2002, 04:23 PM   #1
FlashFXP Developer
FlashFXP Administrator
 
bigstar's Avatar
 
Join Date: Oct 2001
Posts: 7,093
Default FlashFXP BETA Area / Password Guessing
9:00 am PST someone from the address 213-140-8-167.fastres.net started running a password guesser against the FlashFXP BETA download area. After roughly 3 hours of continual attacks apache gave out and the server crashed.

2:00 pm PST apache has been restart.

Please respect our server
bigstar is offline   Reply With Quote
Old 12-09-2002, 05:17 PM   #2
Senior Member
FlashFXP Scripter
 
Join Date: Jan 2002
Location: Madrid, Spain
Posts: 354
Default
Seems a static IP, save the logs and if the attack continues contact with his/her ISP about that, just my opinion.
DYN_DaTa is offline   Reply With Quote
Old 12-09-2002, 10:10 PM   #3
Junior Member
 
Join Date: Dec 2002
Posts: 1
Default FBI
Call the FEDz! Update your UNIX software. Make the password count tries and ban IP for a day or so if failed attempts gets over like 25.
DynAstY is offline   Reply With Quote
Old 12-15-2002, 07:40 PM   #4
Member
FlashFXP Registered User
 
aCe2k's Avatar
 
Join Date: Jun 2002
Posts: 58
Default
25?

More like 5 times...
how hard can it be to type a bloody serial and a password?

And yes, sounds like apache needs a makeover too.
aCe2k is offline   Reply With Quote
Old 12-16-2002, 07:10 AM   #5
FlashFXP Developer
FlashFXP Administrator
 
bigstar's Avatar
 
Join Date: Oct 2001
Posts: 7,093
Default
We've made some changes to better protect our server and will continue to do so.

We're currently looking into a password protection system that will auto block IP addresses after so many tries. Preferably something free or cheap.
bigstar is offline   Reply With Quote
Old 12-17-2002, 01:45 AM   #6
Junior Member
 
Join Date: Sep 2002
Posts: 19
Default
Quote:
Originally posted by bigstar
We've made some changes to better protect our server and will continue to do so.

We're currently looking into a password protection system that will auto block IP addresses after so many tries. Preferably something free or cheap.
Take a look at http://www.cloverwheel.com/cloverpass/

Simple and sweet. I have a modified version which auto bans IP address.
ryan is offline   Reply With Quote
Reply
Create a free account to browse our forums without ads


Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


All times are GMT -5. The time now is 06:24 AM.
Archive - Privacy Statement - Top