New to the community? Start here

Login attack

Hi,

Since 4 days I have massive login tries, all coming from Vietnam. In total about 30 only for today. Thanks to Defender, they were all blocked. Is there any possibility to block all login tries from a country (Vietnam in my case), because I'm not certain that one of these days the will achieve the attack.

Thanks in advance

Guy

PS, beside Defender I've also installed and activated miniOrange 2 Factor Authentication plugin.

Wed, 17 Apr 2019 23:36:14
  • Nithin Ramdas
    • Support Wizard

    Hi Guy,

    Hope you are doing good today. :slight_smile:

    Is there any possibility to block all login tries from a country (Vietnam in my case), because I'm not certain that one of these days the will achieve the attack.

    Defender already comes with the option to block countries, you can find that option under Defender Pro > IP Lockouts > IP Banning > Locations

    [attachments are only viewable by logged-in members]

    This should help to block specific locations according to your needs. Also, please make sure to enable Maks Login Area feature under Defender Pro > Advanced Tools.

    PS, beside Defender I've also installed and activated miniOrange 2 Factor Authentication plugin.

    Defender also provider 2 Factor Authentication in the plugin side which you can enable in Defender Pro > Advanced Tools. Any specific reason to opt for miniOrange plugin, instead of the 2FA feature in Defender? So, that we could see if there are any further improvements needed, or not in our plugin side too.

    I hope this clears your query. Please let us know if you need any further assistance. Have a nice day ahead. :slight_smile:

    Regards,

    Nithin

  • Hayden
    • New Recruit

    You may be able to block a particular country IP, but if the attack is running through a VPN they could possibly switch countries to attack from elsewhere.

    As long as you are protected, I wouldnt get too hung up about it. I am using a different software to help protect an ecommerce site built on woocommerce and that does get between 10 and 20 attacks a day. I know the site is protected so I tend to filter out the emails and just keep a check on my dashboard to make sure everything is updated.