Joomla! Extensions Directory™

Download
Launch

Brute Force Stop

42 reviews
Get Brute Force Stop (v1.5.2)
logo

Introduction

Access & Security, Site Security, Security Tools

This plugin provides means to avert Brute-Force-Attacks on your Joomla-Installation. For this purpose, the plugin stores information on failed login attempts, so that when reaching a configurable number of such failed login attempts the attacker's IP address can be blocked. Furthermore, you can configure notifications about failed logins and blocked IP addresses, as well as a configurable (optionally even adaptive) delay for a failed login attempt.

The component included in the package will allow you to view the blocked IP addresses and manage them, manage whitelists of IP addresses which will never be blocked, viewing failed log attempts and testing the notification.

New in version 1.5.2:
- Note: Only component changes, no (functional) plugin changes
- Fix errors for PHP < 8

New in version 1.5.1 (1.5.0 pulled due to last minute issues):
- Fix bugs (php 8.x issues, ACL options display)
- IP address and subnet validation
- Controls for overriding number of shown elements in lists
- Joomla 5 compatibility
- Hints to go to plugin settings on installation and in settings view

New in version 1.4.6:
- Fix for server errors in component - issues #191/#194
- Fix filter deprecation warning in plugin

For a detailed list of changes in each version see the commit history:
- For the plugin: https://github.com/codeling/bfstop/compare/1.4.6...1.5.0
- For the component: https://github.com/codeling/com_bfstop/compare/1.4.6...1.5.1

Contributors:
- pt-PT/pt-BR translations and various fixes by solrac (comproperty247(at)gmail.com)
- ca-ES translations by nouespai
- fr-FR translations by Flying_Lolo
- nl-NL translations and various fixes by Rob van Baal (info(at)fischertechnikclub.nl/http://www.fischertechnikclub.nl)
- es-ES translations by Aimagen (info(at)aimagen.com)
- ru-RU translations by Raven (ravencrow(at)mail.ru)
- it-IT translations and various fixes by Stefano Buscaglia (info(at)binarioetico.org/http://www.binarioetico.org)
- old nl-NL translations by Agrusoft

Write a review

Excellent, effective and best of all? free!



Posted on 05 April 2013
I sought this out because I run a server that hosts a couple hundred websites with Joomla in place. After analyzing my apache logs I noticed that brute force attempts were very common.



While my company sticks to pretty strong security policies such as never having an "admin" account and a daily password change ( yes, daily.. automated password changes ) .. I still don't like the idea of someone sending hundreds of POST requests per hour trying to break into one of our sites.



I had written a script to analyze the apache logs for x number of POST requests in an hour to ban them from the server ENTIRELY but while that's been successful.. it's had one or two false positives and it still doesn't prevent someone from getting in a hundred or so tries before the script catches them.



In comes this plugin! I love it because it's more specific, it doesn't just count POSTs per hour it counts failed login attempts in a row and allows you to temp ban them as well as get notified.. I have it set up to ban after only 4 attempts for a period of an hour which I think is fair.. I get notified so if I see abuse I can permanently ban them myself.



Great job! I'm glad I found it so I didn't have to write it myself =)

It does what it says!



Posted on 19 March 2013
Thank You for this plugin! IT is awsome and works! Great!

God bless You!
Owner's reply: Thank you for taking the time to write a review!
If you should have any questions, problems or enhancement requests, just go over to https://github.com/codeling/bfstop/issues!

Brute Force Stop

Version:
1.5.2
Developer:
Bernhard Froehler
Last updated:
Feb 18 2024
1 year ago
Date added:
Nov 19 2014
License:
GPLv2 or later
Type:
Free download
Includes:
c p
Compatibility:
J3 J4 J5
Download

Uses Joomla! Update System

Demo Support Documentation

Score:

Functionality:
Ease of use:
Support:
Documentation:

Write a review