Skip to content

I suggest you...

← Feature Suggestions
'Fail2ban Joomla Login Support' has been merged into this idea

Make more Jails for Fail2Ban e.g. mysql error log

see header

please make plesk saver with more helpful Jails for fail2ban

mysql error log
typo3 login fails
joomla login fails
shopware
email
ftp
webmail

an any more

27 votes

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close

We’ll send you updates on this idea

Fabian Flasche shared this idea  ·   ·  Report…  ·  Admin →
How important is this to you?

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • Azurel commented  ·   ·  Report

    From time to time TOR users attack my server. I would like to have a fail2ban jail for TOR that can be turned on and off. All IPs are listed here: https://check.torproject.org/torbulkexitlist

    Or as a firewal rule.

    I realize that the attacker can also use other services.

  • Mark P commented  ·   ·  Report

    2016-12-16T20:58:41+00:00 INFO 81.140.60.181 joomlafailure Username and password do not match or you do not have an account yet

  • Mark P commented  ·   ·  Report

    You can use Fail2ban with Joomla, but will need a regx creating to read joomla logs

    /var/www/vhosts/*/httpdocs/log/error.php

  • Ivan Kamnev commented  ·   ·  Report

    Add jail for MySQL.

    For example:
    plesk-mysql looks for MySQL authentication failures and bans attackers for 10 minutes.

  • Mathias H commented  ·   ·  Report

    Magento 1.9 and 2!
    ownCloud and Nextcloud

  • Peter Hornburg commented  ·   ·  Report

    It is possible, when activating the fail2ban plugin in Joomla. After that here will be an error entry in the apache error log.
    This would also be a good idea for other CMS like Typo3

  • Anonymous commented  ·   ·  Report

    Hello,

    As you did with WordPress Fail2ban jail (failregex)- please add more cms jails like for drupal and joomla .

  • Tozz commented  ·   ·  Report

    This is impossible. Because Joomla returns an HTTP 200 when a login fails, where WordPress (as it should) returns a 401. Fail2Ban checkes for those 401 return codes and bans accordingly.

    Because Joomla always returns 200 (regardless of whether the login succeeded or not) there is no way to check for failed logins.

Feature Suggestions: Security

Categories

Feedback and Knowledge Base

(thinking…)