• Resolved rstoeber

    (@rstoeber)


    I have noticed a pattern where invalid login attempts from an address like 123.123.123.x are frequently followed by another attempt from 123.123.123.y and then from 123.123.123.z.

    Is it possible to automatically block a range of addresses after a bad login attempt? For example, if 123.123.123.x fails a test I might like to block 123.123.123.* or even 123.123.*.* instead of the single address.

    Is that possible somehow?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, yes you can add 123.123.*.* or 123.123.123.* range. The IP address range can be added in WP Security -> Blacklist Manager.

    Let me know if you need more information or help.

    Thank you

    • This reply was modified 6 years, 3 months ago by mbrsolution.
    Thread Starter rstoeber

    (@rstoeber)

    I realize the address ranges can be added manually. But I want them added automatically, in response to a failed login attempt.

    Individual addresses are blacklisted automatically when a login fails, but I have observed that most of the time the attacks (attempts) just continue with a slightly different address.

    I would like to block multiple addresses (like 123.123.123.*) automatically. Is that possible?

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    I would like to block multiple addresses (like 123.123.123.*) automatically. Is that possible?

    Currently that is not possible in the plugin.

    If you want to reduce the number of login attempts in your site, I suggest that you enable one of the Brute Force features, if you don’t already have it enabled. Also if you enable one of the following features, it will help you even further. This is located in WP Security -> Firewall -> Basic Firewall Rules -> WordPress XMLRPC & Pingback Vulnerability Protection.

    Completely Block Access To XMLRPC:
    Disable Pingback Functionality From XMLRPC:

    Let me know if you need more information or help.

    Kind regards

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Automatically blacklist range of IP addresses’ is closed to new replies.