[Defender] How does Defender deal with muliple attacks to my site, producing 403 errors

My Server logs show multiple 403 attacks from lots of Russian/Asian sites. how can Defender protect me from these and automatically ban the IP address, so it doesn't happen again?
It would appear that defender only locks them out if there are multiple 404 attempts?

Also, it would be great if you could BAN users automatically when trying to access certain files on my site?
Also, I wish there was more information shown on each item in the Defender log, without having to click on each one to see the info, i.e. IP address, Ban Stats and Ban/UnBan button, I wish it was all shown on one line. Makes for quicker management and manual banning?

Here is a sample from my log file of 403 attacks made: 'this ip address is based in Singapore' my site is based in the UK

4.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:07 +0000] "POST /index.php" 404 22 - 22986 16040 0.301 29360128 79.78% 9.97% "/Appa4003eb2.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:11 +0000] "GET /index.php" 404 0 - 22986 16040 0.285 14680064 84.14% 14.02% "/webdav/"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:15 +0000] "GET /index.php" 404 0 - 22986 16040 0.980 8388608 61.24% 37.77% "/help.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:19 +0000] "GET /index.php" 404 0 - 22986 16040 1.001 4194304 67.95% 29.98% "/java.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:21 +0000] "GET /index.php" 404 0 - 22986 16040 1.035 2097152 63.79% 31.89% "/_query.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:23 +0000] "GET /index.php" 403 0 - 22986 16040 0.172 2097152 52.28% 40.66% "/test.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:27 +0000] "GET /index.php" 403 0 - 22986 16040 0.163 2097152 67.54% 30.70% "/db_pma.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:28 +0000] "GET /index.php" 403 0 - 22986 16040 0.167 2097152 72.03% 24.01% "/logon.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:28 +0000] "GET /index.php" 403 0 - 22986 16040 0.159 2097152 69.10% 31.41% "/help-e.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:29 +0000] "GET /index.php" 403 0 - 22986 16040 0.165 2097152 66.81% 30.37% "/license.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:29 +0000] "GET /index.php" 403 0 - 22986 16040 0.181 2097152 55.39% 44.32% "/log.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:30 +0000] "GET /index.php" 403 0 - 22986 16040 0.169 2097152 70.99% 23.66% "/hell.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:39 +0000] "GET /index.php" 403 0 - 22986 16040 0.167 2097152 54.03% 42.02% "/x.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:40 +0000] "GET /index.php" 403 0 - 22986 16040 0.167 2097152 53.93% 41.94% "/shell.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:43 +0000] "GET /index.php" 403 0 - 22986 16040 0.167 2097152 65.89% 29.95% "/desktop.ini.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:47 +0000] "GET /index.php" 403 0 - 22986 16040 0.171 2097152 70.08% 29.20% "/z.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:47 +0000] "GET /index.php" 403 0 - 22986 16040 0.157 2097152 76.22% 25.41% "/lala.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:48 +0000] "GET /index.php" 403 0 - 22986 16040 0.157 2097152 70.28% 25.56% "/lala-dpr.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:48 +0000] "GET /index.php" 403 0 - 22986 16040 0.162 2097152 80.17% 18.50% "/wpc.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:51 +0000] "GET /index.php" 403 0 - 22986 16040 0.170 2097152 76.36% 23.50% "/t6nv.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:52 +0000] "GET /index.php" 403 0 - 22986 16040 0.174 2097152 63.16% 40.19% "/muhstik.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:52 +0000] "GET /index.php" 403 0 - 22986 16040 0.161 2097152 68.12% 30.96% "/text.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:41:53 +0000] "GET /index.php" 403 0 - 22986 16040 0.168 2097152 77.32% 17.84% "/muhstik.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:03 +0000] "GET /index.php" 403 0 - 22986 16040 0.167 2097152 65.71% 29.87% "/muhstik2.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:03 +0000] "GET /index.php" 403 0 - 22986 16040 0.193 2097152 67.26% 31.04% "/muhstiks.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:04 +0000] "GET /index.php" 403 0 - 22986 16040 0.167 2097152 65.87% 29.94% "/muhstik-dpr.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:05 +0000] "GET /index.php" 403 0 - 22986 16040 0.167 2097152 83.79% 17.95% "/lol.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:05 +0000] "GET /index.php" 403 0 - 22986 16040 0.165 2097152 72.66% 24.22% "/uploader.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:06 +0000] "GET /index.php" 403 0 - 22986 16040 0.169 2097152 64.90% 29.50% "/cmd.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:07 +0000] "GET /index.php" 403 0 - 22986 16040 0.176 2097152 62.58% 34.14% "/cmv.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:08 +0000] "GET /index.php" 403 0 - 22986 16040 0.164 2097152 73.37% 24.46% "/cmdd.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:08 +0000] "GET /index.php" 403 0 - 22986 16040 0.165 2097152 66.71% 30.32% "/knal.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:09 +0000] "GET /index.php" 403 0 - 22986 16040 0.171 2097152 70.24% 29.27% "/cmd.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:10 +0000] "GET /index.php" 403 0 - 22986 16040 0.178 2097152 84.28% 16.86% "/shell.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:10 +0000] "GET /index.php" 403 0 - 22986 16040 0.164 2097152 67.11% 36.60% "/appserv.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:11 +0000] "GET /index.php" 403 0 - 22986 16040 0.173 2097152 57.94% 34.76% "/scripts/setup.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:15 +0000] "GET /index.php" 403 0 - 22986 16040 0.170 2097152 70.41% 23.47% "/phpmyadmin/scripts/setup.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:19 +0000] "GET /index.php" 403 0 - 22986 16040 0.161 2097152 68.16% 24.78% "/phpMyAdmin/scripts/setup.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:20 +0000] "GET /index.php" 403 0 - 22986 16040 0.205 2097152 48.67% 29.20% "/phpmyadmin/scripts/db___.init.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:23 +0000] "GET /index.php" 403 0 - 22986 16040 0.166 2097152 66.21% 36.12% "/plugins/weathermap/editor.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:26 +0000] "GET /index.php" 403 0 - 22986 16040 0.170 2097152 64.74% 23.54% "/cacti/plugins/weathermap/editor.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:27 +0000] "GET /index.php?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP" 403 0 - 22986 16040 0.165 2097152 60.50% 36.30% "/index.php?s=/index/\think\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:28 +0000] "GET /index.php" 403 0 - 22986 16040 0.170 2097152 58.77% 35.26% "/d7.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:28 +0000] "GET /index.php" 403 0 - 22986 16040 0.176 2097152 79.62% 22.75% "/rxr.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:29 +0000] "GET /index.php" 403 0 - 22986 16040 0.317 2097152 34.69% 18.92% "/1x.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:30 +0000] "GET /index.php" 403 0 - 22986 16040 0.161 2097152 80.77% 18.64% "/home.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:36 +0000] "GET /index.php" 403 0 - 22986 16040 0.159 2097152 56.56% 37.71% "/spider.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:39 +0000] "GET /index.php" 403 0 - 22986 16040 0.164 2097152 61.05% 30.53% "/composers.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:43 +0000] "GET /index.php" 403 0 - 22986 16040 0.167 2097152 71.93% 29.97% "/izom.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:54 +0000] "GET /index.php" 403 0 - 22986 16040 0.168 2097152 59.57% 35.74% "/hue2.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:42:59 +0000] "GET /index.php" 403 0 - 22986 16040 0.171 2097152 70.31% 29.30% "/Drupal.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:00 +0000] "GET /index.php?f=1" 403 0 - 22986 16040 0.170 2097152 58.73% 35.24% "/lang.php?f=1"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:05 +0000] "GET /index.php" 403 0 - 22986 16040 0.167 2097152 72.01% 30.00% "/payload.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:07 +0000] "GET /index.php" 403 0 - 22986 16040 0.168 2097152 65.38% 29.72% "/new_license.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:09 +0000] "GET /index.php?waled=1" 403 0 - 22986 16040 0.167 2097152 65.84% 29.93% "/libraries/joomla/jmail.php?waled=1"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:11 +0000] "GET /index.php?0=1" 403 0 - 22986 16040 0.165 2097152 79.02% 18.24% "/libraries/joomla/wl.php?0=1"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:12 +0000] "GET /index.php" 403 0 - 22986 16040 0.167 2097152 71.82% 29.92% "/images/vuln.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:12 +0000] "POST /index.php" 403 19 - 22986 16040 0.160 2097152 75.13% 18.78% "/wuwu11.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:13 +0000] "POST /index.php" 403 19 - 22986 16040 0.168 2097152 65.63% 29.83% "/xw.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:14 +0000] "POST /index.php" 403 19 - 22986 16040 0.159 2097152 75.34% 25.11% "/xw1.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:16 +0000] "POST /index.php" 403 19 - 22986 16040 0.156 2097152 83.14% 19.19% "/9678.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:19 +0000] "POST /index.php" 403 21 - 22986 16040 0.167 2097152 71.72% 29.88% "/xx.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:20 +0000] "POST /index.php" 403 22 - 22986 16040 0.186 2097152 86.07% 10.76% "/s.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:21 +0000] "POST /index.php" 403 22 - 22986 16040 0.158 2097152 57.00% 38.00% "/w.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:24 +0000] "POST /index.php" 403 18 - 22986 16040 0.170 2097152 64.53% 35.20% "/qaq.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:35 +0000] "POST /index.php" 403 22 - 22986 16111 0.188 12582912 69.27% 26.64% "/db_session.init.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:36 +0000] "POST /index.php" 403 22 - 22986 16111 0.167 8388608 71.68% 23.89% "/db__.init.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:43 +0000] "POST /index.php?pbid=open" 403 36 - 22986 16111 0.177 6291456 56.45% 39.52% "/m.php?pbid=open"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:43 +0000] "POST /index.php" 403 36 - 22986 16111 0.162 4194304 74.28% 24.76% "/099.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:44 +0000] "POST /index.php" 403 36 - 22986 16111 0.166 4194304 72.34% 30.14% "/_404.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:45 +0000] "POST /index.php" 403 36 - 22986 16111 0.165 4194304 66.60% 30.27% "/Alarg53.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:46 +0000] "POST /index.php" 403 36 - 22986 16111 0.171 2097152 70.12% 29.22% "/lapan.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:47 +0000] "POST /index.php" 403 36 - 22986 16111 0.167 2097152 59.93% 35.96% "/p34ky1337.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:49 +0000] "POST /index.php" 403 36 - 22986 16111 0.165 2097152 60.59% 42.41% "/pk1914.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:49 +0000] "POST /index.php" 403 36 - 22986 16111 0.164 2097152 85.60% 12.23% "/sllolx.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:50 +0000] "POST /index.php" 403 36 - 22986 16111 0.166 2097152 66.18% 36.10% "/Skri.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:43:51 +0000] "POST /index.php" 403 18 - 22986 16111 0.164 2097152 60.99% 36.60% "/db_dataml.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:00 +0000] "POST /index.php" 403 18 - 22986 16111 0.158 2097152 75.85% 25.28% "/db_desql.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:03 +0000] "POST /index.php" 403 19 - 22986 16111 0.173 2097152 69.19% 28.83% "/mx.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:04 +0000] "POST /index.php" 403 21 - 22986 16111 0.168 2097152 53.47% 41.58% "/wshell.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:11 +0000] "POST /index.php" 403 19 - 22986 16111 0.168 2097152 77.42% 17.87% "/qq.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:12 +0000] "POST /index.php" 403 24 - 22986 16111 0.176 2097152 68.36% 28.48% "/conflg.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:13 +0000] "POST /index.php" 403 29 - 22986 16111 0.170 2097152 58.95% 35.37% "/conflg.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:16 +0000] "POST /index.php" 403 19 - 22986 16111 0.169 2097152 76.76% 29.52% "/phpstudy.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:17 +0000] "POST /index.php" 403 19 - 22986 16111 0.169 2097152 70.93% 23.64% "/phpStudy.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:19 +0000] "POST /index.php" 403 26 - 22986 16111 0.163 2097152 79.80% 18.41% "/feixiang.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:22 +0000] "POST /index.php" 403 27 - 22986 16111 0.167 2097152 71.81% 29.92% "/ak47.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:23 +0000] "POST /index.php" 403 27 - 22986 16111 0.161 2097152 62.14% 37.28% "/ak48.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:24 +0000] "POST /index.php" 403 22 - 22986 16111 0.160 2097152 68.89% 25.05% "/xiao.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:25 +0000] "POST /index.php" 403 24 - 22986 16111 0.163 2097152 73.60% 24.53% "/yao.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:26 +0000] "POST /index.php" 403 24 - 22986 16111 0.168 2097152 59.64% 35.78% "/defect.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:27 +0000] "POST /index.php" 403 22 - 22986 16111 0.160 2097152 62.31% 37.39% "/webslee.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:28 +0000] "POST /index.php" 403 23 - 22986 16111 0.170 2097152 52.98% 41.21% "/q.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:29 +0000] "POST /index.php" 403 22 - 22986 16111 0.166 2097152 78.13% 24.04% "/pe.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:30 +0000] "POST /index.php" 403 20 - 22986 16111 0.168 2097152 47.53% 47.53% "/hm.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:30 +0000] "POST /index.php" 403 26 - 22986 16111 0.165 2097152 66.79% 30.36% "/cainiao.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:31 +0000] "POST /index.php" 403 21 - 22986 16111 0.169 2097152 65.22% 35.58% "/zuoshou.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:35 +0000] "POST /index.php" 403 21 - 22986 16111 0.167 2097152 59.92% 35.95% "/zuo.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:40 +0000] "POST /index.php" 403 25 - 22986 16111 0.168 2097152 83.09% 17.80% "/aotu.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:41 +0000] "POST /index.php" 403 25 - 22986 16111 0.170 2097152 82.37% 17.65% "/aotu7.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:45 +0000] "POST /index.php" 403 21 - 22986 16111 0.164 2097152 66.91% 30.41% "/bak.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:46 +0000] "POST /index.php" 403 21 - 22986 16111 0.163 2097152 79.94% 18.45% "/system.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:47 +0000] "POST /index.php" 403 20 - 22986 16111 0.165 2097152 78.67% 24.20% "/l6.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:51 +0000] "POST /index.php" 403 20 - 22986 16111 0.179 2097152 72.69% 22.37% "/l7.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:44:55 +0000] "POST /index.php" 403 18 - 22986 16111 0.168 2097152 65.40% 29.73% "/l8.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:07 +0000] "POST /index.php" 403 19 - 22986 16162 0.178 12582912 61.89% 28.13% "/56.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:08 +0000] "POST /index.php" 403 20 - 22986 16162 0.163 8388608 73.78% 24.59% "/mz.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:19 +0000] "POST /index.php" 403 20 - 22986 16165 0.186 12582912 64.47% 26.86% "/xx.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:20 +0000] "POST /index.php" 403 22 - 22986 16165 0.172 8388608 69.93% 29.14% "/yumo.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:20 +0000] "POST /index.php" 403 23 - 22986 16165 0.165 6291456 72.63% 30.26% "/min.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:21 +0000] "POST /index.php" 403 23 - 22986 16165 0.166 4194304 66.31% 30.14% "/wan.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:22 +0000] "POST /index.php" 403 23 - 22986 16165 0.164 4194304 67.22% 30.56% "/wanan.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:23 +0000] "POST /index.php" 403 19 - 22986 16165 0.160 4194304 56.34% 43.82% "/ssaa.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:24 +0000] "POST /index.php" 403 20 - 22986 16165 0.158 2097152 69.58% 31.63% "/qq.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:30 +0000] "GET /index.php" 403 0 - 22986 16165 0.167 2097152 65.71% 29.87% "/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:30 +0000] "GET /index.php" 403 0 - 22986 16165 0.163 2097152 67.39% 36.76% "/phpmyadmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:32 +0000] "GET /index.php" 403 0 - 22986 16165 0.182 2097152 54.90% 38.43% "/phpMyAdmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:35 +0000] "GET /index.php" 403 0 - 22986 16165 0.164 2097152 61.07% 36.64% "/pmd/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:43 +0000] "GET /index.php" 403 0 - 22986 16165 0.178 2097152 61.80% 39.33% "/pma/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:44 +0000] "GET /index.php" 403 0 - 22986 16165 0.167 2097152 53.95% 41.96% "/PMA/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:49 +0000] "GET /index.php" 403 0 - 22986 16165 0.165 2097152 72.88% 24.29% "/pmamy/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:51 +0000] "GET /index.php" 403 0 - 22986 16165 0.166 2097152 78.45% 18.10% "/pmamy2/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:52 +0000] "GET /index.php" 403 0 - 22986 16165 0.166 2097152 66.37% 36.20% "/mysql/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:52 +0000] "GET /index.php" 403 0 - 22986 16165 0.170 2097152 70.78% 29.49% "/admin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:54 +0000] "GET /index.php" 403 0 - 22986 16165 0.168 2097152 65.29% 29.68% "/db/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:55 +0000] "GET /index.php" 403 0 - 22986 16165 0.169 2097152 65.07% 35.49% "/dbadmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:56 +0000] "GET /index.php" 403 0 - 22986 16165 0.164 2097152 66.99% 30.45% "/web/phpMyAdmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:56 +0000] "GET /index.php" 403 0 - 22986 16165 0.158 2097152 69.75% 31.70% "/admin/pma/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:57 +0000] "GET /index.php" 403 0 - 22986 16165 0.179 2097152 61.45% 33.52% "/admin/PMA/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:45:59 +0000] "GET /index.php" 403 0 - 22986 16165 0.165 2097152 66.72% 36.39% "/admin/mysql/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:00 +0000] "GET /index.php" 403 0 - 22986 16165 0.167 2097152 71.82% 23.94% "/admin/mysql2/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:01 +0000] "GET /index.php" 403 0 - 22986 16165 0.182 2097152 71.60% 33.04% "/admin/phpmyadmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:02 +0000] "GET /index.php" 403 0 - 22986 16165 0.165 2097152 66.51% 30.23% "/admin/phpMyAdmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:03 +0000] "GET /index.php" 403 0 - 22986 16165 0.165 2097152 78.69% 18.16% "/admin/phpmyadmin2/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:04 +0000] "GET /index.php" 403 0 - 22986 16165 0.159 2097152 62.78% 37.67% "/mysqladmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:04 +0000] "GET /index.php" 403 0 - 22986 16165 0.160 2097152 62.56% 37.54% "/mysql-admin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:05 +0000] "GET /index.php" 403 0 - 22986 16165 0.193 2097152 56.91% 41.39% "/mysql_admin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:05 +0000] "GET /index.php" 403 0 - 22986 16165 0.165 2097152 78.78% 18.18% "/phpadmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:06 +0000] "GET /index.php" 403 0 - 22986 16165 0.170 2097152 70.51% 29.38% "/phpAdmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:07 +0000] "GET /index.php" 403 0 - 22986 16165 0.171 2097152 64.49% 29.31% "/phpmyadmin0/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:08 +0000] "GET /index.php" 403 0 - 22986 16165 0.184 2097152 59.81% 38.06% "/phpmyadmin1/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:08 +0000] "GET /index.php" 403 0 - 22986 16165 0.168 2097152 65.64% 29.84% "/phpmyadmin2/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:09 +0000] "GET /index.php" 403 0 - 22986 16165 0.186 2097152 69.79% 32.21% "/phpMyAdmin-4.4.0/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:19 +0000] "GET /index.php" 403 0 - 22986 16165 0.165 2097152 60.54% 36.33% "/myadmin2/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:20 +0000] "GET /index.php" 403 0 - 22986 16165 0.166 2097152 66.24% 30.11% "/xampp/phpmyadmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:27 +0000] "GET /index.php" 403 0 - 22986 16165 0.168 2097152 65.35% 29.70% "/www/phpMyAdmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:28 +0000] "GET /index.php" 403 0 - 22986 16165 0.165 2097152 78.71% 24.22% "/tools/phpMyAdmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:29 +0000] "GET /index.php" 403 0 - 22986 16165 0.171 2097152 58.58% 35.15% "/phpmyadmin-old/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:31 +0000] "GET /index.php" 403 0 - 22986 16165 0.169 2097152 65.27% 41.53% "/phpMyAdminold/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:32 +0000] "GET /index.php" 403 0 - 22986 16165 0.165 2097152 60.74% 30.37% "/phpMyAdmin.old/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:32 +0000] "GET /index.php" 403 0 - 22986 16165 0.168 2097152 71.48% 29.78% "/pma-old/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:33 +0000] "GET /index.php" 403 0 - 22986 16165 0.173 2097152 57.71% 34.63% "/claroline/phpMyAdmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:34 +0000] "GET /index.php" 403 0 - 22986 16165 0.168 2097152 71.59% 29.83% "/typo3/phpmyadmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:36 +0000] "GET /index.php" 403 0 - 22986 16165 0.165 2097152 48.41% 48.41% "/phpma/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:36 +0000] "GET /index.php" 403 0 - 22986 16165 0.161 2097152 74.60% 24.87% "/phpmyadmin/phpmyadmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:38 +0000] "GET /index.php" 403 0 - 22986 16165 0.202 2097152 69.32% 29.71% "/phpMyAdmin/phpMyAdmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:39 +0000] "GET /index.php" 403 0 - 22986 16165 0.163 2097152 61.46% 36.88% "/phpMyAbmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:40 +0000] "GET /index.php" 403 0 - 22986 16165 0.172 2097152 75.47% 23.22% "/phpMyAdmin__/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:41 +0000] "GET /index.php" 403 0 - 22986 16165 0.171 2097152 70.30% 29.29% "/phpMyAdmin+++---/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:42 +0000] "GET /index.php" 403 0 - 22986 16165 0.164 2097152 73.11% 24.37% "/v/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:44 +0000] "GET /index.php" 403 0 - 22986 16165 0.167 2097152 78.01% 24.00% "/phpMyAdm1n/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:44 +0000] "GET /index.php" 403 0 - 22986 16165 0.168 2097152 53.72% 41.79% "/shaAdmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:46 +0000] "GET /index.php" 403 0 - 22986 16165 0.170 2097152 70.44% 23.48% "/phpMyadmi/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:47 +0000] "GET /index.php" 403 0 - 22986 16165 0.169 2097152 59.25% 41.47% "/phpMyAdmion/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:50 +0000] "GET /index.php" 403 0 - 22986 16165 0.170 2097152 70.57% 23.52% "/s/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:50 +0000] "GET /index.php" 403 0 - 22986 16165 0.166 2097152 78.40% 24.12% "/MyAdmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:51 +0000] "GET /index.php" 403 0 - 22986 16165 0.167 2097152 65.95% 29.98% "/phpMyAdmin1/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:46:55 +0000] "GET /index.php" 403 0 - 22986 16165 0.170 2097152 76.34% 23.49% "/phpMyAdmin123/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:03 +0000] "GET /index.php" 403 0 - 22986 16165 0.171 2097152 64.28% 35.06% "/pwd/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:04 +0000] "GET /index.php" 403 0 - 22986 16165 0.177 2097152 67.68% 33.84% "/phpMyAdmina/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:04 +0000] "GET /index.php" 403 0 - 22986 16165 0.203 2097152 69.05% 9.86% "/phpMydmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:05 +0000] "GET /index.php" 403 0 - 22986 16165 0.170 2097152 64.63% 35.25% "/phpMyAdmins/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:07 +0000] "GET /index.php" 403 0 - 22986 16165 0.163 2097152 67.59% 30.72% "/phpMyAdmin._/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:08 +0000] "GET /index.php" 403 0 - 22986 16165 0.184 2097152 81.50% 16.30% "/phpmyadmin2222/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:11 +0000] "GET /index.php" 403 0 - 22986 16165 0.163 2097152 67.28% 30.58% "/phpiMyAdmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:12 +0000] "GET /index.php" 403 0 - 22986 16165 0.172 2097152 69.86% 23.29% "/phpNyAdmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:12 +0000] "GET /index.php" 403 0 - 22986 16165 0.169 2097152 76.96% 17.76% "/program/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:13 +0000] "GET /index.php" 403 0 - 22986 16165 0.178 2097152 72.94% 22.44% "/shopdb/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:14 +0000] "GET /index.php" 403 0 - 22986 16165 0.165 2097152 66.61% 30.28% "/phppma/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:15 +0000] "GET /index.php" 403 0 - 22986 16165 0.171 2097152 58.45% 40.92% "/mysql/admin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:16 +0000] "GET /index.php" 403 0 - 22986 16165 0.181 2097152 66.31% 27.63% "/mysql/dbadmin/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:17 +0000] "GET /index.php" 403 0 - 22986 16165 0.165 2097152 66.83% 30.38% "/mysql/sqlmanager/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:18 +0000] "GET /index.php" 403 0 - 22986 16165 0.173 2097152 81.08% 23.16% "/mysql/mysqlmanager/index.php"
124.156.178.165, 127.0.0.1 - [28/Mar/2019:23:47:21 +0000] "GET /index.php" 403 0 - 22986 16165 0.195 2097152 51.33% 30.80% "/wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php"
  • Dimitris

    Hello there Rawson,

    hope you're doing well and thanks for reaching us! :slight_smile:

    how can Defender protect me from these and automatically ban the IP address, so it doesn't happen again?
    It would appear that defender only locks them out if there are multiple 404 attempts?

    The 403 responses mean that the requested file/endpoint is actually forbidden, so these are actually harmful as your server doesn't send any response to these requests.

    I can see that you've already used the 'permanent' lockout for both "Login Protection" and "404 Detection" modules, so you should be good with that. You may also want to lower down the number from 5 errors to something smaller like 2 or 3, just keep in mind to whitelist your IP so you avoid getting lockouts for yourself.

    Also, it would be great if you could BAN users automatically when trying to access certain files on my site?

    By default, you shouldn't have any files that shouldn't be accessible in the first place. That's handled by folder/file permissions in your server.

    Also, I wish there was more information shown on each item in the Defender log, without having to click on each one to see the info, i.e. IP address, Ban Stats and Ban/UnBan button, I wish it was all shown on one line. Makes for quicker management and manual banning?

    I'm afraid that it's the amount of information that makes us using accordions in there, as if all these info and actions were visible in the table view, we would be having issues with possible long descriptions and smaller screens.

    Warm regards,
    Dimitris

  • Rawson

    Thanks for your reply dimitris
    I do understand what the 403's are, but it doesn't stop hackers trying to access those files and adding load to your site!

    What would be great is if you could add all those files that are trying to be accessed to an exclude list, that Ban's any IP address that tries to access them. similar to the 404, but for basically for know attackers, that way it would lessen the load on your site and instantly stop anyone accessing the site that tried to access certain files, i.e. like the example files given in the Log file I included.

    What else would be great is a shared Banned IP address list, that is automatically updated in Defender, as I imagine everyone who runs defender is building a rather large list of banned IP's, why no share that with everyone, stopping attackers in their tracks even before they get to my site or anyone else's, that's using Defender?

    Thanks, Rawson

  • Nastia

    Hello Rawson

    I trust you are doing well!

    I apologize for the delay in this thread. Attackers(or bots) do change their IP address too often so it is not possible to block a certain what IP should be blocked. Bu continuously blocking these IPs anyone can end up with blocking all the IPs eventually, after some time, which can be obtain by actual visitors. There is a list of dynamic IPs available, but please note this list is changing all the time:
    https://www.projecthoneypot.org/list_of_ips.php

    Although thank you for your suggestion, I have forwarded it to our developers so they could have a closer looks and see if there is possible to pull/update a list of these IPs dynamically.

    Thank you and have a great day!

    Cheers,
    Nastia

Thank NAME, for their help.

Let NAME know exactly why they deserved these points.

Gift a custom amount of points.