BFM admin attacks , can I block on username?

Sc0rian

Verified User
Joined
Jul 26, 2009
Messages
18
I'm running CSF, and I do have the custom script blocking IP's from BFM to CSF, however I am getting a large number of attempts to certain usernames.

How can I create a script to instantly ban IP's who attempt to login with username admin (etc).

Login attempts are all for proftpd and exim.


admin 280(login failures) Jan 31 03:01 Feb 4 10:20 Yes
 
I'm running CSF, and I do have the custom script blocking IP's from BFM to CSF, however I am getting a large number of attempts to certain usernames.

How can I create a script to instantly ban IP's who attempt to login with username admin (etc).
Why don't use iptable?
 
You can lower the amount of failures in CSF, but not for a specific account. However 280 login failures isn't something to worry about.
 
hm okay.



admin 665 Jan 31 03:01 Feb 7 14:54 Yes

Its now at 665. Its a shame I cannot just block all attempts to the account admin
 
hm okay.



admin 665 Jan 31 03:01 Feb 7 14:54 Yes

Its now at 665. Its a shame I cannot just block all attempts to the account admin

Code:
User	Login Failures	First	Last	Notified	Select
root	417	Feb 6 08:34	Feb 7 18:58	Yes

It's normal, nothing to worry about :)
 
Back
Top