Hello,
I recently notice that my admin login page is being attacked by bots trying to login..
I read a couple of contributions about changing admin directory or something but instead
of doing that.. this might be better or something.
The idea is making a module like what an SSH ip allowed/deny feature does w/c even though
the username is valid on the system but the IP of the one trying to access
the system,page,url does not match the one listed on a table allowed lists it deny the request and gives him/her a Unauthorized Login message page. And if he/she or it tries to login for maybee 3x or more it bans the IP automatically forever. Its like a ruleset or something.. but it applies only on accesing WHMCS Admin Login Page / URL.
I just wanted to know if anybody has done this?
if you guys did, wanna share how to do this script/addon module?
Feel free to post your ideas and suggestion.
I am not a php programmer so I might be looking for a help on making this one. (note: not hiring