Some members have contacted us regarding "Failed Login Notification" emails.


In case you have never received one of these, if you - or anyone - attempts to login to your account without success, five times in a row, the account will be blocked from logging in for the next 15 minutes, and you will receive an email like this:


Dear James,


Someone has tried to log into your account on Cricket Web Forum with an incorrect password at least 5 times. This person has been prevented from attempting to login to your account for the next 15 minutes.


The person trying to log into your account had the following IP address: xxx.xx.xx.xxx




All the best,
Cricket Web Forum

On researching this matter, it seems that there is a spate of spammers from China attempting to log in to forums powered by vBulletin software. The reasons they may be doing this is to generate spam on the forum, or it may be to try and ascertain if your password is the same as other services you use.


This is why we block out attempts to log-in after 5 failed attempts for 15 minutes. This helps prevent the spammers from using a Dictionary Attack on your account.


Remember it is good security practice to ensure you use a different password on each site you use. If a hacker can determine your password on one of your web accounts, then any other site that uses that password is vulnerable.