I do get some sort of vibe that the hacker is more appropiately a script-kiddie rather than true hacker.
Oh, and do your best to make your password complex. Keep their lenght (15-20 characters is fine) but mix in special characters, uppercase and lowercase (if it's case sensitive) and add digits. Make it abstract and complex. Don't add dictionary words, not even if you mix blend them into a password. Not even reversed and leave out sequences like qwert, asdfg, you name it.
Also, it would be worthy if you'd ask your hosting company for some sort of further checkups and 'keep an eye on the logs.' Have you got access for the logs? If not, ask them. Or at least ask them to figure out, skim through the logs to find out what type of attack was used. Like Minsc already explained, it'd took quite a "few" tries. Therefore, the information could be extracted from the logs with ease.
Also, require a permanent ban on that specified IP adress, if you say so that you know it. But this isn't a fix nowadays. Dynamic IPs, Proxies, etc.
__________________ “Once you incorporate the millionaire's mindset, set goals, chase your dreams with a burning desire and get motivated on a daily basis, success becomes inevitable.” by me.
|