Lately we've seen huge upsurge in brute force admin login attacks, and they seem to be coming from a wider variety of IP addresses. It's no longer as effective to blacklist an IP address after 10 failed login atempts.

However, since these bad login attempts are all so similar in nature (username:admin), that using that as an additional criteria for the blacklist might be a quicker way to catch bad actors at their first attempt, rather than giving them the 5-10 attempts we give real users who are having trouble typing in their info correctly.

It would be cool if there were also an option to auto-blacklist any IP address that attempts to login with one of a specified list of usernames (like "admin") and/or passwords ("admin","123pass", etc.).

Thanks,
Greg

Now that would be an awesome feature! And it would help those who have suffered from the autobanned Google crawlers/bots.