Question Does vbsecurity block IPs trying hundreds of accounts, but only 4 times per account?

[Alfa1]

Attacker are using the same IP addresses to try 4 login attempts per account per IP and use hundreds of IPs. Do the settings offer options to block this?

 

[Fillip H.]

They do indeed, you can simply set the amount of failed logins in the Security Watchers: Logins to 4

 

[Cosmic]

For v2, which should be out on monday, there will be the ability to configure actions on IP addresses based on the following conditions:

Tries & fails to log into X different existing accounts:
Tries & fails to log into X different accounts which don't exist:

You'll be able to ban, temp ban etc IP addresses based on those conditions.

There are two options because we have found some people try to log in with a few variants of their own username, because they've forgotten it, and you may not want to take the same action on them as you do against people who are trying to log into existing accounts.

Cosmic

 

[Fillip H.]

Hello Alfa1,

This ticket has now been closed with the status Answered.

We hope your issue or question has been addressed to your satisfaction. If not, please feel free to re-open it by clicking this link.

If you have any further issues or questions, please feel free to start a new support ticket via the button at the top of every page.

Thank you!