Home

If you can't wait to get started using the plugin:

• [Download and Installation](wiki/Download and Installation)
• Configuration

What is it / What does it do?

The Brute Force Stop (bfstop) plugin monitors each failed login attempt, and logs it to the database. If so configured, it can send out a notification for each or a limited number of failed login attempts per day. When running a server which is at least somewhat frequented, this is not such a good idea, as there is usually not much to be done when such an attempt happens; so the default option is to not notify about failed login attempts. If the number of failed login attempts exceeds an amount given in the configuration, the plugin will prevent any further access to Joomla! from this IP address - meaning the assumed attacker can not try to login anymore; he will be blocked from accessing your whole Joomla! installation, he only sees a (configurable) message that he has exceeded the number of allowed login attempts, and is therefore banned. The ban can be configured to be either permanent or to last a specified time. In addition, the plugin can notify about the remaining login attempts (before blocking the IP addresses), and can add a delay after each failed login.

Other stuff

• Contributors
• [Known Issues](wiki/Known Issues)
• [Planned Features](wiki/Planned Features)
• Roadmap
• Frequently asked questions (FAQ)