Go Back   FlashFXP Forums > >
FlashFXP BETA Area / Password Guessing FlashFXP BETA Area / Password Guessing
Tickets Search Today's Posts Mark Forums Read

News All the latest News and Information

Reply
 
Thread Tools Rate Thread Display Modes
Old 12-09-2002, 05:23 PM   #1
bigstar
FlashFXP Developer
FlashFXP Administrator
ioFTPD Beta Tester
 
bigstar's Avatar
 
Join Date: Oct 2001
Posts: 8,012
Default FlashFXP BETA Area / Password Guessing
9:00 am PST someone from the address 213-140-8-167.fastres.net started running a password guesser against the FlashFXP BETA download area. After roughly 3 hours of continual attacks apache gave out and the server crashed.

2:00 pm PST apache has been restart.

Please respect our server
bigstar is offline   Reply With Quote
Old 12-09-2002, 06:17 PM   #2
DYN_DaTa
Senior Member
FlashFXP Scripter
 
Join Date: Jan 2002
Location: Madrid, Spain
Posts: 346
Default
Seems a static IP, save the logs and if the attack continues contact with his/her ISP about that, just my opinion.
DYN_DaTa is offline   Reply With Quote
Old 12-09-2002, 11:10 PM   #3
DynAstY
Junior Member
 
Join Date: Dec 2002
Posts: 1
Default FBI
Call the FEDz! Update your UNIX software. Make the password count tries and ban IP for a day or so if failed attempts gets over like 25.
DynAstY is offline   Reply With Quote
Old 12-15-2002, 08:40 PM   #4
aCe2k
Member
FlashFXP Registered User
 
aCe2k's Avatar
 
Join Date: Jun 2002
Posts: 58
Default
25?

More like 5 times...
how hard can it be to type a bloody serial and a password?

And yes, sounds like apache needs a makeover too.
aCe2k is offline   Reply With Quote
Old 12-16-2002, 08:10 AM   #5
bigstar
FlashFXP Developer
FlashFXP Administrator
ioFTPD Beta Tester
 
bigstar's Avatar
 
Join Date: Oct 2001
Posts: 8,012
Default
We've made some changes to better protect our server and will continue to do so.

We're currently looking into a password protection system that will auto block IP addresses after so many tries. Preferably something free or cheap.
bigstar is offline   Reply With Quote
Old 12-17-2002, 02:45 AM   #6
ryan
Junior Member
 
Join Date: Sep 2002
Posts: 19
Default
Quote:
Originally posted by bigstar
We've made some changes to better protect our server and will continue to do so.

We're currently looking into a password protection system that will auto block IP addresses after so many tries. Preferably something free or cheap.
Take a look at http://www.cloverwheel.com/cloverpass/

Simple and sweet. I have a modified version which auto bans IP address.
ryan is offline   Reply With Quote
Reply

Tags
apache, flashfxp, password, pst, server
Thread Tools
Display Modes Rate This Thread
Linear Mode Linear Mode
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 06:08 AM.
Archive - Privacy Statement - Top
Parts of this site powered by vBulletin Mods & Addons from DragonByte Technologies Ltd. (Details)