baddog

One of my clients is being subjected to a masssive brute force attack today. His server has been crawling all day and he can't figure out how to stop it.

Is there a way to limit the number of failed login attempts or limit them to 1 every 30 seconds? Possibly a server configuration?

Thank you in advance