member area security

[Guido-Man]

Been away too long, lost my status :-)

Here is a fun one, easy enough to stop someone from hurling passwords if they are not masquerading their ip address.

but when they change it with every few hurls, and they are coming at 5 to 10/second, what can a person do to actually find out who they are. I have a possible solution, but am looking for some input on this.

Wondering about embedding a media content that will log some other info besides the IP Address, and let them get into a fake /members/ folder when the hurling starts.

would like to get into a serious discussion about this with all who are interested.

Looking forward to any responses.

Any suggestions on this would be greatly appreciated.

[Guido-Man]

on a second note, I would like to say, I can't believe this guy has not given up yet, and once he is in, he can be blocked easy, it's the network traffic of this scipt he's using thats pissing me off.

I can delete the username who is consuming mass amounts of bandwidth, or logging in from tons of different ip addresses.

It's a matter of stopping this hurling action I'm looking for, If he could get in I could stop him, he's not getting n though and the packets are hurting the network bandwidth.

[Gemini]

Someone posted software here a few weeks ago on this Guido. Howie thinks it was like spyder or something. It was in the subject line I think

[Guido-Man]

thank you very much, I will try to find it.

[Speedy26]

Try this is it blocks the ips of brute force attacks as they happen. also deletes shared passwords.

http://www.monster-submit.com/sentry/

[Gemini]

No prob Quido. It was brand new stuff and looked pretty good in specs on the site