3

In all my Joomla sites, I find too many errors on the Logs/error.log like below:

Joomla FAILURE: Username and password do not match or you do not have an account yet.

I think this indicates someone were trying my admin password. When thinking about the scale of the attempted attack, it feels very uncomfortable.
Shall I do anything about it?
What do you guys do?
And is blocking all the IPs in this list a good idea?

  • Why too broad this question guys? Maybe the title was (before editing), but then the question's content is describing a specific problem that can produce some useful and concise answers – FFrewin Nov 21 '17 at 13:05
  • Blocking the IPs is not efficient - not a good idea - unless you have a mechanism to create temporary blocks when X number of attacks has occurred. See answers below - and also search in JSE for security related questions like how to secure a Joomla site. You will find a lot of good ideas. – FFrewin Nov 21 '17 at 13:13
6

the most simple thing you can do, is to put a username and password for your administrator folder in cpanel.

this way you should first input the username and password to see the Joomla login page.

3

Joomla is a well known CMS and it's normally very easy to detect whether or not a site is powered by Joomla. Because of this, knowing the URL of the administrator page is easy to find.

With that in mind, you will always get people trying to brute force their way through.

I understand it would make you feel uncomfortable, so I'd suggest using Akeeba's Login Guard extensions, which is similar to Joomla's Two Factor Authentication, but is has more features.

Akeeba's Admin Tools is also another great extension that comes with some very handy features to add extra security layers to you site

2

Add password protection to the admin folder through cpanel and enable two factor authentication on the site then on your superuser acct. After that, no need to feel uncomfortable. Far leaner solution than installing any extensions.

1

You can use an existing Joomla! extension that can identify brute-force-attacks and attempt to stop it, for example:

https://extensions.joomla.org/extension/brute-force-stop/

OR

Perhaps code your own version of it!

Note that I have no experience whatsoever in the use of such extensions. I just happened to know what to look for. Happy upgrading!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.