Blocking Hack Attempts?

[Norman Hill]

I would like to log the IP addresses of users that attempt
to log into my Frontpage website.
The site requires a user ID and Password.
I would like to keep track of the unsuccessful attempts
and after 4 or 5 attempts I would like to block that users
IP address from further access.
Is there any code examples of something like this
available?

Thanks
Norman Hill

 

[Steve Easton]

Food for thought about attempting this.
IP addresses for the most part are not
permanently assigned, but are changed every time
a user logs into their ISP.
For example my IP address at the moment is:
67-100-38-8 but if I log off and back on it will change.
So, lets say Joe Shmuckatelli tries to hack your site
when he's logged on with ip 123.456.789.123 and you block
him.
I log on tomorrow and get assigned 123.456.789.123.
You have blocked me, the honest guy, from visiting your site,
and Joe S. is back at trying to hack it with 67.100.38.8

Also, AOL ( shudder ) uses proxy servers, whereby several
AOL users will be visiting your site using the same IP address.
block one, you block them all.

Lastly, are you sure they are hack attempts. There are some
legitimate error log entries that are generated by people
looking to see if your site has a chatroom or newsgroup.

hth

 

[Norman Hill]

Steve;
This site is an administrative site and there are only two
legitimate users. By blocking the IP address I can stop
automated HACK programs from trying all combinations of
user ID's and passwords. I also wanted to email myself when
the block occurred so that I would know someone is trying
to get into the system.

Norm