Interesting. Over the past half hour my server has come under heavy login-attempt attack and from lots of different "countries" -- Pakistan, Netherlands, Hungary, USA, India. It's probably that huge hacking operation based in Wyoming.
No worries, though. 3-strikes IP lockout and passwords are random strings. Still amusing, though because there are definitely more interesting targets than me.
Three more lockouts while I was writing the above.
I sometimes wonder if I seem like a more interesting target because I have security so strictly enforced.
And still at it. Hahaha. Tightened it up a bit more. It's now 2-strikes and the IP is blocked. Seems they have lots of IPs, though.. Iran Germany, Belgium, all over.
What they don't know is that even if they succeed in the bajillion to one password guessing game, they'll hit my own encrypted 2FA. You don't get to log in unless the app (that I wrote) on my phone says yes.
They're still at it. Never seen an attack this relentless.
Well, keep at it guys. You'll run out of IP addresses centuries before you succeed. Lol. (IP lockouts are permanent until I manually override.)