The Game Modding Community - Since 2001

Security Breach

A Blog Post for GameBanana

Over the weekend our admins detected some kind of security breach which has affected several thousand accounts. It appears that a small number of IPs had successfully logged into several thousand accounts. Some of these IPs were found to be on IP blacklists. 

We believe that bots were performing brute force login attempts on accounts and eventually gained access to some of them. I don't believe that plain passwords have been compromised as they are encrypted with salts in our member database. 

As a response we have reset these accounts' passwords and implemented several new security measures:

  1. After 5 failed login attempts, you will be blocked from logging in for 60 seconds. An email will also be sent to the account owner and a modlog entry made.
  2. If you log in from an IP that has been blacklisted by dronebl.org, it will be recorded in the modlog.

We have several more security features planned, such as 2-step authentication and irregular location notifications.

Remember to always use strong passwords. If you don't use a password manager, you should! Try keepassx.

Big thanks to mini for detecting the issue.

Posts

  • 6mo
    YellowJello avatar
    YellowJello username pic Joined 14y ago
    Offline
    103,477 points Ranked 29th
    32 medals 3 legendary 6 rare
    • 10 years a member Medal icon
    • Submitted 200 Threads Medal icon
    • Submitted 50 Maps Medal icon
    • Reached 75,000 Points Medal icon
    • 6 years a member Medal icon
    • Submitted 100 Threads Medal icon
    Is there any way you can also require a confirmation when changing emails? I just updated mine and saved it, but there was no verification required. 
    • Agree x 1
    Jiggle Jiggle avatar
    Mantra
    Jiggle Jiggle
  • 6mo
    andiargetlam avatar
    andiargetlam username pic Joined 11mo ago
    Connecting.....
    Outlaws Flag Affiliation: Outlaws
    1,868 points Ranked 2716th
    18 medals 2 legendary 3 rare
    • 2017 Top Contributor Medal icon
    • 30 submissions featured Medal icon
    • 10 submissions featured Medal icon
    • GameBanana’s Christmas Giveaway 2017 Day Nine Winner! Medal icon
    • Returned 1000 times Medal icon
    • One month a member Medal icon
    andiargetlam avatar
    andiargetlam
    Outlaws Flag
    Affiliation
    Outlaws
    Just wanna ask, how to know that my account get affected? and is there's important information stealed from my email or else if my account get affected?
    Artistic Recoil avatar
    Mantra
    Artistic Recoil
  • 6mo
    Ring-A-Ding Rampage avatar
    Ring-A-Ding Rampage username pic Joined 7y ago
    In Continuum
    2,897 points Ranked 1708th
    74 medals 9 legendary 20 rare
    • Submitted 60 Sprites Medal icon
    • Thanked 500 submitters Medal icon
    • 15+ Entries! GameBanana’s Christmas Giveaway 2015 Medal icon
    • Submitted 100 Skins Medal icon
    • Reached 100 subscribers Medal icon
    • 15+ Entries! GameBanana’s Christmas Giveaway 2016 Medal icon
    Ring-A-Ding Rampage avatar
    Ring-A-Ding Rampage
    (づ。◕‿‿◕。)づ
    tom : 2FA sounds cool, will I be able to use it with Authy?

    Steam does not support Authy and it was really irksome to install Steam mobile app just for 2FA :D.
    I'mma deck you in the schnoz. avatar
    Mantra
    I'mma deck you in the schnoz.
  • 6mo
    KonataHamster avatar
    KonataHamster Joined 8y ago
    Offline
    14,467 points Ranked 309th
    30 medals 1 legendary 7 rare
    • Returned 5000 times Medal icon
    • Returned 1000 times Medal icon
    • 10 submissions featured Medal icon
    • 6 years a member Medal icon
    • Submitted 30 Polls Medal icon
    • Submitted 100 Threads Medal icon
    So if I wasn't logged out my accounts safe?
    Oversensitive sociopath avatar
    Mantra
    Oversensitive sociopath
  • 6mo
    Stark Raven avatar
    Stark Raven Joined 6y ago
    Offline
    5,874 points Ranked 817th
    13 medals 4 rare
    • 8-14 Entries! GameBanana’s Christmas Giveaway 2015 Medal icon
    • Returned 1000 times Medal icon
    • 8-14 Entries! GameBanana’s Christmas Giveaway 2016 Medal icon
    • 8-14 Entries! GameBanana’s Christmas Giveaway 2017 Medal icon
    • 6-10 Entries! GameBanana’s Christmas Giveaway 2014 Medal icon
    • Reached 1,000 Points Medal icon
    Thanks for the update.
    Default User
  • 6moEdited 6mo
    NekroMancer avatar
    NekroMancer username pic Joined 3y ago
    SC Manager HL Manager
    @ffline
    105th Inc. Flag Affiliation: 105th Inc.
    1,642 points Ranked 3091st
    26 medals 3 legendary 7 rare
    • 30 submissions featured Medal icon
    • Returned 5000 times Medal icon
    • 2017 Top Contributor Medal icon
    • Returned 1000 times Medal icon
    • 10 submissions featured Medal icon
    • Achieved Game Manager clearance Medal icon
    NekroMancer avatar
    NekroMancer
    105th Inc. Flag
    Affiliation
    105th Inc.
    If an account was affected, what does it mean?
    D34D avatar
    Mantra
    D34D
  • 6mo
    tom avatar
    tom username pic Joined 17y ago
    Ripe Supporter TBS2 Manager Super Admin
    Offline
    44,580 points Ranked 91st
    55 medals 12 legendary 10 rare
    • Achieved Super Admin clearance Medal icon
    • 10 years a member Medal icon
    • Thanked 500 submitters Medal icon
    • Submitted 200 Blogs Medal icon
    • Submitted 200 Threads Medal icon
    • Submitted 60 Polls Medal icon
    tom avatar
    tom
    test 1 2 3
    If you got a security breach email your account was affected. If not, you should be ok. As a precaution though, ensure you have a strong password.
    testing 1234 222
  • 6mo
    Captiva avatar
    Captiva username pic Joined 2y ago
    CS:S Manager CS1.6 Manager
    Present
    Home > Models
    Life Tree Flag Affiliation: Life Tree
    21,511 points Ranked 210th
    43 medals 5 legendary 9 rare
    • 30 submissions featured Medal icon
    • Submitted 100 Skins Medal icon
    • 2017 Top Contributor Medal icon
    • Reached 100 subscribers Medal icon
    • Returned 5000 times Medal icon
    • 10 submissions featured Medal icon
    Captiva avatar
    Captiva
    Life Tree Flag
    Affiliation
    Life Tree
    Has my account been affected, too? D:
    不可能はない avatar
    Mantra
    不可能はない
  • 6mo
    cd5ssmffan avatar
    cd5ssmffan username pic Joined 3y ago
    Offλine
    1,586 points Ranked 3219th
    22 medals 5 rare
    • Returned 1000 times Medal icon
    • Received thanks 50 times Medal icon
    • GameBanana’s Christmas Giveaway 2017 Day Nine Winner! Medal icon
    • GameBanana’s Christmas Giveaway 2017 Day Fifteen Winner! Medal icon
    • 8-14 Entries! GameBanana’s Christmas Giveaway 2017 Medal icon
    • One month a member Medal icon
    Has my account been affected?
    pwnz0r.net
  • 6mo
    BlaXe avatar
    BlaXe username pic Joined 5y ago
    Online
    17,439 points Ranked 250th
    39 medals 7 legendary 6 rare
    • Returned 5000 times Medal icon
    • Reached 100 subscribers Medal icon
    • 1st Place - 2016 Uberstyles Contest Medal icon
    • Thanked 500 submitters Medal icon
    • 15+ Entries! GameBanana’s Christmas Giveaway 2016 Medal icon
    • 1st Place - 2017 Uberstyles Contest Medal icon
    BlaXe avatar
    BlaXe
    Uberstyle Expert
    Great job guys.
    Making new Uberstyle! avatar
    Mantra
    Making new Uberstyle!

Embed

Share banner
Image URL:
HTML embed code:
BB embed code:
Markdown embed code:

Blogger


tom avatar
tom username pic Joined 17y ago
Ripe Supporter TBS2 Manager Super Admin
Offline
44,580 points Ranked 91st
55 medals 12 legendary 10 rare
  • Achieved Super Admin clearance Medal icon
  • 10 years a member Medal icon
  • Thanked 500 submitters Medal icon
  • Submitted 200 Blogs Medal icon
  • Submitted 200 Threads Medal icon
  • Submitted 60 Polls Medal icon
Sign up to access this!
Sign up to access this!
Sign up to access this!
Sign up to access this!

Details

Initiative
None

Share

  • Share on Reddit
  • Share on Twitter
  • Share on Facebook
  • Share on Google+

Stats

  • 439 Views
  • 11 Posts
  • 6mo Submitted
  • 3mo Modified

Attention Gamer! Mascot

GameBanana is one of the oldest mod sites on the net. Sign up and maximize your browsing experience.

  • Subscribe: Get notified of new submissions like this.
  • Say Thanks: Show your appreciation - send modders points.
  • Post: Give modders your thoughts on their work.
  • Vote: Help your favorite modders win monthly awards.
  • Flag: Alert moderators and warn members of problems with mods.
  • Watch: Get notified when mods are updated.

Stop Lurking! Sign up now!

Already a Bananite? Login

More from Submitter

WiPs by Submitter

bcp.crwdcntrl.net tracking pixel