Brute Force Password Attacks?

I was curious, where do the people trying to access a paysites members area actually get their password combinations from?

The last hour or so we've been experiencing a brute force attack on one of our paysites (thankfully StrongBox has stopped themall) but im just wondering where they come up with the combinations they try, some of them actually look like they could be legitimate user/pass combos from other paysites.

Regards,

Lee

i think a lot of these people are just guessing random word combonations

Its usually not random....they have a list of "known good" userid/password combos that have worked in the past....people are notoriously lazy about security and tend to use the same userid/password every time they join a paysite. That is why we force random userids and passwords.