IP Blacklisting for Multiple Bad Password Attempts

What is IP Blacklisting?

IP blacklisting involves temporarily or permanently blocking an IP address that exhibits suspicious behaviour, such as multiple failed login attempts. This prevents brute force attacks and helps protect against spam and trojan manipulation.

How It Works:

1. Detection: The system detects a high number of bad password attempts from the same IP within a short period, or a uncharacteristically high send rate, connection rate or transfer rate. 
2. Blacklist Entry: Once the threshold is reached, the IP address is added to the blacklist.
3. IDS Block: An Intrusion Detection System (IDS) may block traffic from this IP, preventing further access.

How to Obtain Your Public IP Address

Using GEN Identity Toolkit:

1. browse to https://gen.direct/whoami
2. Enter your email (for a copy) and Ticket Number (if any) and press Identify
3. COPY "Your IP Address" and paste that into your ticket. 

Dealing with IP Block

Investigate and Identify

1. Initial Assessment: Our team will review the logs to determine if there was a genuine threat or a mistake.
2. Identify Patterns: We'll check if this is an isolated incident or part of a larger pattern that needs attention.

Unblock Process

1. Manual Unblocking:

• If it’s confirmed as a false positive, we will manually unblock your IP address and remove the blacklisting entry.

Protection Against Brute Force Attacks

• Brute Force Prevention: By blocking suspicious IPs, we protect against automated login attempts which could compromise your account security.
• Spam Reduction: IP blacklisting helps filter out spam emails or malicious messages that might originate from compromised systems.
• Trojan Protection: Reduces the risk of trojans using an unsuspecting user’s system to launch attacks.

Conclusion

Your protection is our priority. If you have any concerns about your account security, please do not hesitate to contact us immediately. Regularly updating your passwords and enabling 2FA can significantly enhance your security posture against such threats.