Notice re Failed Login Attempts

[SWCAdmin]

We're continuing to get a trickle of these front door probes from various IP addresses. Our forum software is up to date with its security patches. We are manually blocking bot IP addresses as they present themselves, but that's a reactive measure. We already blacklist IPs, but the package for doing that is oriented to new account registrations, not existing account entries.

All the resources we've consulted suggest this is just something that happens in the e-world, and that as long as you have a decent password your account is fine there is no cause for concern. We're working with some technical folks to see how to be more proactive. We still have no indication that any account has been accessed. The alerts members are receiving are indications that the basic security measures are working.

[SWCAdmin]

We have received about two dozen of these multiple failed login attempts over the last two weeks or so.

We have added all the offending IP addresses to our list of IPs that are banned from viewing the board at all. Almost all of them were unique and originating in various Asian countries. We have a much larger commercial blacklist of IPs, but that doesn't kick in until the login or registration attempt is successful at first.

We have consulted with several security folks who kicked our tires and confirmed that our appropriate controls are in place, up to date, and working. This is just something that happens in this pesky e-world.

Again, sorry for the nuisance to those who are being pinged. The advice in the first post here about having a good password and marching on continues to be the most sound and actionable intel we have found.