No mercy: banning for life, with method
Sixty-seven addresses try our doors. They are not mistyping: they are looking for the password file. We ban them for life. And the same rule became a power in our game.
1. What a prober is, and what it is not
A visitor who mistypes an address lands on a page that no longer exists. A prober tries doors that never existed here: the password file, another software's entrance, an old plugin known for its holes.
Nobody types /wp-login.php by accident on a site that
never ran WordPress. That is not a mistake: it is an attempt.
2. Why "for life" and not "fifteen minutes"
A short block works against someone who mistypes a password. It does nothing against a machine trying a thousand doors: it waits out the quarter of an hour and starts again. It has time; we do not.