Support

This has been asked before (repeatedly) and I have explained that permanently blocking IPs is a Very Bad Idea. You will end up bogging down your site (too many IP blacklist rules take ungodly amounts of time and memory to process) and blocking legitimate users (a hacker used 25000 compromised machines to attack you, these IPs do NOT belong to hackers, they are dynamically assigned and will end up being assigned to legitimate users with non-compromised machines). You are essentially asking me for a machine gun to shoot your feet. Sorry, I too care too much about you and my other clients to do that. It would be irresponsible.

What is responsible and sane is auto-blocking repeat offenders. That's what the automatic IP ban does. If the attacker used a big bot network to launch too few and irregular attacks from each IP you can do nothing about it. The best thing you can do is blocking the malicious requests –which Admin Tools did– and make sure that you are using strong passwords and all protection settings in Admin Tools to prevent them from successfully brute forcing your administrator password.

Please stop obsessing with IP blacklisting. It is an architecturally incorrect way to handle security. IP blacklisting must be reserved for persistent attacks over a long period of time (over 12 hours) and should be revised (in plain English: deleted) every month at most. In any other case you do end up shooting yourself in the feet. Take this from the author of the security solution you are using, who has exactly 0 manually blacklisted IPs in his list across all of his sites.