Support

Recently my website has had thousands of login failures from the Russian Federation. I like to blacklist offending IP addresses in the Security Exceptions Log. I see there is a "select all box" at the top of the list, but "blacklist" isn't a choice anywhere so I have to individually click on each entry. I would like to request that there be a way to select all and blacklist them easily. Thank you for your consideration.
Kathy Gorman

Hackers don't use their own IP addresses. So if you block one, they will just move on to the next one in their collection and keep on keeping on. That leaves you with someone's legitimate IP address blocked on your website. Granted, it is a Russian Federation IP, but still, it isn't who you wanted to get rid of.

You can set up Admin Tools to automatically block an IP address if it creates x number of security exceptions in y minutes for z hours/days. You select the values of x, y and z in the setup. So you can temporarily block the IP address and force the hacker to use another one while not blocking it forever. You can then add an IP to the permanent black list if it gets w number of temporary blocks.

Permanent blocks are a bad idea. It is only a matter of time before you hit one that is used by a real customer.

Thank you for your reply. I don't understand how they are able to use so many IP addresses so quickly to try to login to my site, but I know they're doing it (happily my user name isn't "admin" and my password a dictionary word!) I guess I should stop trying to block all of them so I don't block everyone in the world and just live with it. Thanks for the advice and quick response.
Kathy

It probably isn't a human on the other end, it's a script.

You're welcome! Have a good weekend.