Automatic Blacklisting by Login Name

[mattolsen]

We have automatic blacklisting turned on and for the most part it is working well, but we still do get a lot of failed login attempts by unknown IP's. Is there a way to automatically block an IP address the first time it attemps a login using certain login names (e.g. root, admin, guest, webadmin, etc.)?

I could probably create a project that modified the GoAnywhere database directly and adds the IP to the blacklist, but I was wondering if there was already something in place.

[Support_Rick]

Matt,

We do not have a way to do this currently.

[mattolsen]

Didn't think so but I figured I'd ask.

Thanks for your help.

[kmcguire3]

I know its been a while since this question was asked, but do you now have the capability to BLOCK logins by username? Would be a great feature. If not, how can I Open an enhancement request for this feature in a future release?

[support_steve]

You can utilise the Malicious User Name Monitor.

If enabled, the Malicious User Name Monitor will block list an IP address temporarily or permanently if authentication was attempted using a user name specified in the User Names field.

Username.png (9.04 KiB) Viewed 12 times

This is available in System -> Automatic IP Block List