I was shocked to see someone continually (about once every 5 seconds) attempt to log into my server without being banned. It looks like the auto-ban settings are OFF by default. Wow. So, I went to turn it on and the auto-ban settings impose a minimal of 10 attempts in a single hour! Again...
Why can I not set 3 attempts in a 24-hour window, like most places that need rigid security, and at least have the auto-ban turned on with more conservative settings (maybe 10 in a 24-hour window)?
repeated login attempts from unknown IP
Moderator: Project members
Re: repeated login attempts from unknown IP
I plan to remove auto ban completely.
All you need is a long and secure password. Then you can have people knocking on your day till end of time without them ever getting in.
All you need is a long and secure password. Then you can have people knocking on your day till end of time without them ever getting in.