Mysterious behavior with unauthorized login attempts

  • Michael

    (@michael-luther)


    3 months, 2 weeks ago

    Hi Simon,

    on one website (nginx server) there have just been a large number of failed login attempts from only two IPv4 addresses for around 20 minutes.

    PLUGIN SETTINGS
    Protection level: high
    Notify if blocked: checked
    Failed attempts until notification: 10

    I wonder why only one of the two IPs was temporarily blocked. If I was actually notified after every 10 failed login attempts, there must have been around 250 failed attempts.

    Do you have any idea what’s going on there?

    All the best
    Michael

Viewing 1 replies (of 1 total)
  • Thread Starter Michael

    (@michael-luther)

    PS: I have now added the two IPs to the blocklist and it seems to be quiet for now at least.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.