Support

If you have added hundreds of IPs to the black You Are Doing It Wrong. If you've read my posts on the subject you'd know that adding an IP to the blacklist is the very last resort. You just need to use the automatic IP banning which blacklists an IP for X amount of time if at least Y attack attempts were detected within Z amount of time. And we also have a repeat offenders auto-blocking feature which lets you permanently blacklist an IP address if it gets auto-banned X times within Y amount of time.

Using these two features mean that you don't have to deal with the IP blacklists. They are managed automatically by the software. You will also NOT end up with hundreds of IPs in the blacklist. Remember that having hundreds of IPs in the blacklist not only makes your site slower (performance impact is measurable after ~100 blacklisted IPs) but will also end up blocking legitimate traffic. Do the smart thing, let the software decide when to block an IP address.

Checks for certain exceptions occur before the IP filtering due to the way Joomla! works. For example, the login attempt warnings are raised by Joomla!'s user management system which loads before the IP filtering has the chance to run. This is normal and nothing to worry about. It merely tells you that some fool made a futile attempt to log in to your site. The result they see on their end, no matter if they guess the username and password correctly or not, is a 403 Forbidden error. So, don't worry. These are idiots who can't debug their own pathetic "hacking" scripts...