Hi there,

Unfortunately my website is pretty much under constant attack, christ knows why!  But anyway  I've been looking at my web logs and someone has reloaded a page over 2k times, which I can only presume is from a brute force attempt.  I'm getting the same with my FTP server on the same box.

Anyway, to remove DNN from the issue, how would I make DNN block an IP from trying a login attempt x amount of times?  I want to set a maximum attempt count to like 10 or something before I get hacked.

Thanks a million for your time!

Nick.

I've never had to do this myself, but I did a quick www.google.com/search and found a few that looked like they might cover what you need to have happened. I don't know what, if any, effect on perf0rmance or anything like that.

Most seem to involve writing a new httpHandler and using that to block the IP.

Baatezu wrote I've never had to do this myself, but I did a quick www.google.com/search and found a few that looked like they might cover what you need to have happened. I don't know what, if any, effect on perf0rmance or anything like that. Most seem to involve writing a new httpHandler and using that to block the IP.

Hi Baatezu,

Thanks for the inf0rmation, I've managed to get what I needed by configuring the membership provider, as by default the required attributes are ommitted.  If I continue to get issues from troublesome IP ranges I shall have to make something a little harsher.

Thanks for your time!