Trouble logging in, DoS?

[Dov]

Looking for some Admin help.

Couldn’t log in today from any machine connected to home router.

Using phone now via cellular data so different IP than I’ve ever used.

Every time I try from home it claims I’ve tried to many times and was limiting my attempts to once every 15 minutes.

Additional it kept saying wrong username or password which makes no sense since I use password manager with auto fill.

So I did password reset and it still gave that error message.

I sent email to admin via blind email on forum help page.

Response just said someone had been trying to login to my account with incorrect password at least 5 times and had been restricted to one attempt per 15 minutes.

And that IP for those attempts was 66.248.200.2 which Whois gives as California. Which makes no sense I’m in midwest and my IP isn’t even close to that range.


All my hardware and firmware is fully patched, though router hasn’t had firmware update in ~year.

Logs on router showed some DoS attacks but didn’t see the IP address I got emailed above.

Wondering if this might be some type of DoS tied to Hebrew name I use here?

No problems with any other accounts.

Main machine I use here is 2018 Mac Mini w Firefox, I do almost nothing besides PF on that browser on that machine.

Little bit of lurking on 24hourcampfire but don’t have account there, some googling.

Also tested and had same problem with iPad Mini as with Mac.

I don’t understand why password was failing, especially since was able to log in with new reset password via phone and mobile data.

Admins welcome to respond via my email associated with this account, haven’t seen anything odd on that email account.

[Erick Gelhaus]

Agreed; issues logging in over the past few days, inability to upload photos, getting blocked IP messages, etc.

[hufnagel]

I know brazil has been all up my DNS ass the past week or so, so maybe PF's host is getting hosed as well?
170.254.192.0/22
shitty part is, while I have that 'net blocked by the master blacklist, it's not getting caught by the DNS attack filter, since they're rotating through ALL of the IPs in that 'net. which means if I turn logging on to monitor the blacklist, it gets flooded to all hell.

also a DNS attack sourced at Level3.net it looks like, but not nearly as bad as the brazil one.

[Dov]

Hey its working from home router & machines now!

I saw @LittleLebowski post about PF being on the new server today.

https://pistol-forum.com/showthread....-photo-uploads

Hope the mods get some sleep this weekend despite the headaches.

[Guerrero]

I had the same issue, being "locked out" with that same error message. Only now was able to log back in.

[gtmtnbiker98]

I had trouble yesterday and restarted my iPhone 14 and was able to login.

[BehindBlueI's]

I can't upload photos and had to futz around with getting my password accepted to do mod stuff (clean up classifieds). No idea what the issue is. Hopefully LL is on it.

[Guerrero]

I've been locked out for five days. Every time I tried to log in, I got the "too many failed login attempts, wait 15 minutes and try again" message. Still can't log in on my phone.

@LittleLebowski

[Guerrero]

Finally able to log in on my phone, too.

Lessons learned: if people say they're having issues logging in, don't say to yourself, "I wonder if I will, too" and log out.

[Dov]

I've been locked out for five days. Every time I tried to log in, I got the "too many failed login attempts, wait 15 minutes and try again" message. Still can't log in on my phone.

@LittleLebowski

Yeah I've been locked out again for 4-5 days, with exactly same "too many failed login attempts" as you just finally able to log back in.

Think part of issue based on some of the errors I was getting yesterday is that firewall app didn't have its IP whitelisted https://docs.sucuri.net/website-fire...hooting-guide/

I was getting 502 errors yesterday and per that link above:

"502 Errors
These will be Sucuri branded and are normally caused by a firewall on the hosting server blocking the WAF IPs. Check our IP ranges:

192.88.134.0/23
185.93.228.0/22
66.248.200.0/22
2a02:fe80::/29
208.109.0.0/22"

Email I got when submitted email to blind submission on PF about problem said "person trying to log into your account had the following IP address 66.248.200.2"