Can someone who knows please inform me if this is multiple users try to access via one username? 02/04/2011 16:19:47 tommyx /portal/amember/plugins/protect/new_rewrite/login.php?v=-any&url=/xxxx.html 98.216.247.219 http://www.xxxx/amember/plugins/protect/new_rewrite/login.php?v=-any&url=/portal/vip/vip17.html 02/04/2011 15:55:39 tommyx /portal/amember/login.php 89.101.49.185 http://xxxx/amember/login.php 02/04/2011 15:44:34 tommyx /portal/amember/login.php 76.24.30.128 http://www.xxxx/ 02/04/2011 15:01:44 tommyx /portal/amember/login.php 66.30.10.251 http://www.xxxx/ 02/04/2011 14:40:30 tommyx /portal/amember/login.php 146.115.20.82 http://www.xxxx/ 02/04/2011 14:14:58 tommyx /portal/amember/login.php 38.97.98.194 http://www.xxxx/amember/login.php 02/04/2011 13:44:42 tommyx /portal/amember/login.php 79.97.129.143 http://www.xxxx/beta/ 02/04/2011 10:57:37 tommyx /portal/amember/login.php 71.184.207.147 http://www.streampro.tv/beta/ 02/04/2011 07:54:01 tommyx /xxxx/amember/login.php 66.31.46.49 http://www.xxxx/
It looks like tommyx trying logins from 9 different IPs ? You should limit the number of IP addresses a user can attempt access from. Typically a user has a work computer, a home computer, and then maybe a portable device they use via coffeeshop wifi. I limit it to 3 IPs. After that...lock them out for a time.
I run a sports streaming site and I didn't have account sharing setup properly thus my site went into meltdown a few days ago with 1 user passing his login on to 17 different people sorted now to 3 IPs in 60 minutes Thanks lads