Always the same IP address?
This is the owner of that IP range:
http://whois.arin.net/rest/customer/C03368060
Looks like it might be an individual, not a business. Perhaps IB can reach out to the internet provider & get this addressed? Or they can check their user logs and see if any other users regularly connect from this IP range to see if they can otherwise explain the reset attempt.
Originally Posted by
roberton
Also, I'd suggest modifying the system to lock out a given IP address for a longer period of time (or perhaps even permanently) after this many failed attempts. That'd improve security (and would keep me from getting so many emails about failed logins).
Agreed for sure that there needs to be an upper limit on the # of attempts that will be allowed. As far as the interval between attempts, they should implement a
backoff timer.