Brute Force Attack thwart... idea

[RonC3331]

I have many Joomla site and they are under constant brute force attacks. I have deployed a few different measures to protect the sites. The problem as most know is the ability of the attacker to keep using different IP addresses, so there is no easy way to stop them. This type of attack seems to be escalating...

To me the issue could be minimized if there was a unique path for the admin folder for every installation. I realize this would not work for the front end login though. Randomizing the backend login path though would throw a big wrench into systematic automated attacks. Maybe this would too hard to create but I just thought I would put it out there...

[pe7er]

To me the issue could be minimized if there was a unique path for the admin folder for every installation. I realize this would not work for the front end login though. Randomizing the backend login path though would throw a big wrench into systematic automated attacks. Maybe this would too hard to create but I just thought I would put it out there...

Nice idea, but it's already very easy to create such random back-end login paths:
by using a 3rd party extension you can extend the back-end login with a security token
If people try to access /administrator without ?secret-token-defined-by-you they will be redirected to your homepage.
http://extensions.joomla.org/extensions ... protection

To extra secure the front-end, you can use Two Factor Authentication (since Joomla 3.2).

[muzaru]

What I often do is create a htaccess (in de admin folder), which blocks all but mine and a few select ip's. This is doable for me because there's never more than 5 different users on my clients backend

[SpringJS]

I think that could be amazing too

[FlashRebel]

Personaly I use password for admin area using .htaccess for in admin folder and have never problem. I use it how Admin tools from Akeba create it, dont use that component, just that admin password. It works well for me.