Cleo is correct, Strongbox will first suspend the username
for a while - from a few minutes to a few hours, and email
the webmaster. Many webmasters will then change the
user's password. If the abuse continues then Strongbox will
disable the username permanently. It kind of depends, I think.
If you recently had a dictionary attack that you think may have
been successful that would be different than if you had Strongbox
and knew that a dictionary attack was not possible.
Also if the user just joined and their password immediately
showed up on the password sites that would be different
than if they had been a member for years and you never had
a problem with them.
|