'Admin' brute force attacks
-
I’ve seen a HUGE uptick in brute force attacks recently, most attempting to login as “admin.” Since all my sites have long since removed the admin user, I have the box ticked on every Ithemes security install to “Immediately ban a host that attempts to login using the “admin” username.”
But that functionality appears to not be working, or at least not be working as it’s listed. I get the message and see the logs that these many hosts are “locked out” but they aren’t “banned.” (In a few cases, I will get the email notice that they’ve been “banned permanently” but that’s usually a result of the settings I’ve chosen for the same IP address attempting logins within the time settings I’ve set.)
Does anyone know of a way to make at automatic – and permanent – ban for anyone attempting a login with “admin?”
- The topic ‘'Admin' brute force attacks’ is closed to new replies.
