Page 1 of 1

Block by IP - repeated failed attempts...

Posted: Wed Mar 04, 2015 11:10 pm
by mrhill741
In a future build would it be possible to detect repeated failed attempts from an IP and block that IP? Possibly for a set period of days/weeks/months? I have a large number of IP addresses in my logs daily showing repeated attempts using various usernames and password. On my firewall I've set explicit blocks to networks I know we do not do business with but constantly updating an Access List in the SFTP software or creating new Firewall Explicit Block groups gets tiring. Being able to block access to an IP for a set period would greatly enhance security of the service.

Posted: Wed Mar 18, 2015 11:11 pm
by ForumAdmin
most recent builds already do this. It's a build in auto-ban feature (that can be disabled).

There is a domain setting "Disable auto-ban" that has a box next to it that will let you set the ban time and count.