I'd like to set up IP blocking for login.

[zeronose]

Now, I have 11 login attempts for about a month now and most of them are overseas
(please block off the ♥♥♥♥♥♥♥ Chinese ip).
I can not see the picture file in this article and I am very worried about not showing the mail status right now. I asked the question "https://help.steampowered.com/en/wizard/HelpRequest/HT-9WCD-6FF4-C5WN" but I received only the answer to write here.
It is not trivial to travel, but it tends to be tantalized that it is often used only in that country and often connected to other countries ip.

Please login ip blocking function is desperately needed.

ps.This post is written using a Google Translator.

[1danFromSudan]

change pw on steam and mail to something strong, deauthorize all other devices. If it continues enable mobile auth

[Gwarsbane]

IP blocking is useless, you can change your IP in seconds and there are VPNs to make it look like you are anywhere in the world.

And if you make it so that it blocks every IP other then your own, well thats gonna mess you up when your IP changes because your router rebooted for what ever reason.

There is also the ability to spoof IPs...

Basically all you can do is make sure there is no malware on your system, no keyloggers. Then make sure your e-mail is secured with a long complicated password. Make sure you do the same with your steam password and make sure you have steam guard and 2 factor authentication turned on and connected with your cell phone if you have one.

Other then that, I don't think there is much more you can actually do.

[zeronose]

Do you think you did not do this during 11th mail?
Customer consultation does not help either.
I am very angry about the situation.

[zeronose]

Would not it be enough to use ip fixed connection instead of ip ip blocking?

[zeronose]

Blocking incoming ip from other countries

[Wolf Knight]

if the notice only had your account name in it, then it could be someone mistyping their account name when trying to log in.
if the notice said they had the correct name and password, that means YOU have a security problem on your end and you need to fix it.

Steam does not know what your travel habits are.

[zeronose]

I know I do not know my travel habits.
Naturally, that's why you specify blocking options.
We do not know in other countries, but by default our foreign ip blocking function is basically installed and you can turn it off.

+If the login attempts come in once a day for 11 times, I can only see it as an attempt to access the hack.

[Gwarsbane]

This is not twitter or an IM program, you do not need to make 3 individual posts one after another, just edit your post if you forgot something and someone has not posted yet.

Originally posted by zeronose:

Do you think you did not do this during 11th mail?
Customer consultation does not help either.
I am very angry about the situation.

Customer consultation is all you are going to get here. This is the USER discussion area. You submit your ideas, and we USERS discuss them and talk about the good and bad about them.

Originally posted by zeronose:

Would not it be enough to use ip fixed connection instead of ip ip blocking?

As I have said already, IPs can be spoofed, IPs can be changed. You can use a VPN to make it look like you are in any country, including South Korea which my guess is thats where you are from (google translate with text in your public profile). This means blocking all IPs from every other country is pointless because I can use a free VPN to make it look like I am in the same country as you are in.

Depending on how the hijacker found you, they might also already know your IP address and can spoof it, which means fake it and make any external websites think they are connecting from that IP address.

This means that blocking any IP other then your own is pointless. There is also the fact as I already pointed out that your IP can and more then likely does change once your modem reboots due to being updated or the power goes out or what ever.

Originally posted by zeronose:

Blocking incoming ip from other countries

Originally posted by zeronose:

I know I do not know my travel habits.
Naturally, that's why you specify blocking options.
We do not know in other countries, but by default our foreign ip blocking function is basically installed and you can turn it off.

+If the login attempts come in once a day for 11 times, I can only see it as an attempt to access the hack.

As I have mentioned already, blocking IPs are pointless.


Getting upset at Valve and the users here on Steam trying to help you because someone is trying to log into your account does not help you. I have already pointed out everything that you can do about it which is make your end more secure with strong passwords after you have made sure there is nothing on your computer that can compromise making those passwords stronger.

Personally I don't like suggesting anything less then a unique 16 (or more) Alphabetical (upper and lower case) Numerical and Special Character password for every website you use. Very hard to remember, but also very hard to brute force.

[MrL0G1C]

My password a 16 character long random mix of letters, numbers and other characters. Hackers could hack away at my account a million times every second, all day every day for years and never get in to it because they have a 1 in 401,906,756,202,069,927,458,308,096 chance of getting my password correct each time.

Use a tool like password-safe to create and store a strong password for you and you'll never have to worry about anyone guessing your password. Use mobile authentication and it wouldn't even matter if they hack your PC and get your password.

[zeronose]

I'm afraid I can not post a screenshot to this post. One day, someone tried to log in to the mail. It is normal to come back and I am very dissatisfied that the solution is to change the password.

I would like to block ip from other countries. There is too much mail to say that blocking is meaningless. Changing your password every day is a limitation, and 15 messages are currently open. In about a month, I'll have more than 25 of these abusive emails.

If you see Chinese in this mail, it will be a damn Chinese hacker and it is best to just change the password. I am very dissatisfied with what it is.

[Gwarsbane]

We have already told you what you can and can't do. We have already told you that blocking a single IP or a Range of IPs or a whole country of IPs is pointless.

We have told you what you need to do to protect yourself.


Have you also considered that the e-mails you are getting have been spoofed and they are trying to get you to click on links that take you to a site that looks identical to Steams but has a slightly different URL just to get you to log in so that they get your password?


Again and for the FINAL time in this thread Valve can do nothing to help you. Blocking IPs is pointless as there are so many ways around that that only take seconds it makes it pointless.

Scan your system to malware/key loggers.
Change your e-mail password. (Minimum of 16 characters with alphabetical characters both upper and lower case, numeric characters and special characters)
Change your steam password. (Minimum of 16 characters with alphabetical characters both upper and lower case, numeric characters and special characters)
Make sure you are using Steam Guard.
Make sure you are using 2 factor authentication.

Thats all that can be done. You are freaking out over stuff that Valve has no control over. Only YOU can up your security. What you want with blocking IPs is pointless and DOES NOT WORK because of how easy it is to change your IP address.



If you don't like what we are saying, you might as well leave Steam and well pretty much never use any other digital distributor ever again and never go on any website, in fact you might as well stop using the internet and anything connected to the internet, because none of them will be able to block a determined hijacker by blocking their IP because people can change their IPs in seconds.

[MrL0G1C]

You don't need to change your password everyday, if you set a good random one then you only need to set it once. They could hack away at my password for a million years, I don't need to change it.

They can't block Chinese IPs from trying to login - how would millions of Chinese people log in to steam if they are IP blocked?