Tom,
if you are unable to separate suspicious login attempts from regular ones, the only advice is using strong passwords always - especially for priviledged users, you may also consider using dedicated account names other than "admin" and "host".
If you don't expect logins from this area, you also may block IP ranges.

---

Cheers from Germany,
Sebastian Leupold

   

Speed up your DNN Websites with TurboDNN

An important step in our security appears to be the Login IP Filters inside Host settings. (Our live site is currently running 7.1.2)

For our website, if we could at least prevent logins from outside our network, that would be a great step. Our host/admins only need to log in while on our network (or possibly on VPN). So it would be good protection to block any login attempts from outside our network.

We've tried to test the Lgin IP Filter on our test server, but maybe not the best use case.

I understand that the Login Ip Filtering is only possible in the scenario where the website has both public and private IP addresses (I believe this is the reason we couldn't properly test this on our test server)

I'm not yet sure what our IP address scenario is on our live site (need to talk with our server team), but if we have both public and private IP addresses, I'd like to try Login Ip Filtering.

A few questions:

- What is the proper way to specify allowing ONLY a specific range of IP addresses to be able to log in?

- Is it safe to test this feature on our live site?

- What is specifically required in terms of public / private IP Addresses for Login IP Filter to work properly?

- Are there other ways to accomplish this kind of protection (if not in DNN, possible in IIS?). Hiding the Login page?

- Has this feature been improved / enhanced in newer releases (7.3)?

- Any other tips for website security?

I'm still getting hourly attempts to log in to our website...

Thanks. Please let me know if there is any more information I can find about Login IP Filter, and DNN website security in general. This is a big concern to me. Also let me know if you think I should start a new thread for this subject.

Tom