hm ... thats ordinary bruteforce attack with 18k combolist ... strongbox is the best security so far, few bad attempts and ip is blocked. thats why i dont understand "17702 different usernames tried to login from 156 different IP ranges from 83 ISPs in 29 countries." ... it means your sblogin can allow 100+ bad attempts before it block ip? strange ...
