Bad password entered

[lynda.kane]

Hi,

I've just had six emails from Listmail saying someone (not me this time! has entered a bad password in the login page. Some of the various passwords are the first name and last name of a recent purchaser of products from our website (brenda@farm; pasternaks@rogers.com; brenda) . Others ('chester' "") are random. they are all from IP Address: 99.245.156.44 (CPE005004228139-CM001404598226.cpe.net.cable.rogers.com) It's still happening as I type.

Is this a hacker and how do I find out where they are getting our login from?

Thanks,

Lynda

[DW]

Hi Lynda,

It sounds like you have a suspicious client.  I recommend asking your payment processor to investigate possible fraud to try to avoid a potentially costly chargeback.

I recommend changing your administrator password to something longer (ie. 10 characters) and unguessable (containing a number or a capital or two).

To ban the client from ListMailPRO by IP you'll have to manually modify the admin.php file.  Add this line on a blank line after the opening <?php tag.

Code: [Select]

if($_SERVER['REMOTE_ADDR']=='99.245.156.44') exit('Please stop hacking.');
To ban them just from login, do the same but in the login.php file.

A ban feature is coming in a near future update

Regards