Support

Hello,
on my site i'm getting bruteforce attempts for some time, it's always 4 - 5 login attempts on fronted in a minute, from different IP's with same login. From access logs i see that the form is accessed trough ?option=com_users&view=login. Is there a way to completely block login page (the site has no other users, only one admin)? Maybe that's possible with WAF Blacklist? Or maybe there's other way? Thank you in advance.

You should be able to disable the login in Admin Tools in Web Application Firewall, WAF Blacklist. Click on New and enter "login" in the task field. That should prevent the module from being accessed.

That didn't work. Then I tried Component - com_users, View - login and it seems to do the trick, so far no negative effects. Anyway, thank you for pointing where to look.

I actually had the same question twice this morning. The other one was coming from a different URL with different parameters. I'm glad you got it working.

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.