Web Connection 5.0
Re: Track users activities
Messages
Reply to this message
11/07/2012
08:52:17 AM
3N00J0KOX![Show this entire thread in new window]()
08:52:17 AM
3N00J0KOX
| From: | Marty Cantwell |
| To: | Luca |
If you feel this could possibly happen, you could use a technique that eMail servers use called "Tarpitting" where you don't block IP addresses forever, just for a predifined period of time. It could be for minutes, hours, days; really any amount of time you wish. All you would have to do is add a timestamp for when the IP is added to the block table. Then check to see if it has expired the next time that IP attempts to access the system. If it has not expired, block the login attempt. If it has, then allow them to try again.
Just a thought.
Marty
Dear Marty,
thank you for confirmation.
I track IP at login and if an user fails login credentials for 3 times then I insert his IP in blacklist.
Every IP blacklisted is not more allowed to login.
With dynamic IP I think I will see much more IPs in monitoring's logs and it will be impossible to blacklist dangerous users. However I can always block them due to wrong credentials.
Sincerely
Hey Luca,
Since dynamic IPs can change often, there really is no way of tracking them.
Are you using this as a security measure?
Marty
Dear friends,
I use REMOTE_ADDR ServerVariable to indentify access of a remote PC.
But how to identify a PC with dynamic IP?
Is there a way to track it?
Thank you very much
