Quantcast
Channel: BulletProof Security Forum » All Posts
Viewing all articles
Browse latest Browse all 12486

Reply To: Protect Login Page from Brute Force Login Attacks

$
0
0

The HTTP Status Code is:  400 Bad Request and not 403 Forbidden. That means the Ukrainian SpamBot is making a bad|malformed Request to your Login page and nothing bad is happening.  The User Agent String is blank – that usually indicates a SpamBot.  Any Request that is legitimate will have a valid User Agent String.  Example:  HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36.

So since the bad SpamBot is making a bad Request to your website then you can just ignore these Security Log entries.

  • This reply was modified 8 hours, 47 minutes ago by  AITpro Admin.

Viewing all articles
Browse latest Browse all 12486

Trending Articles