Page 2 of 2
Re: brute force attack on /admin
Posted: Mon Oct 25, 2021 8:56 pm
by JNeuhoff
Further to this, we tweaked the Bitninja settings as follows:
enabled the 400112 (anti POST) WAF rule
enabled the URL captcha feature on /admin/
And that seems to result in a 100% rejection rate of this particular bruteforce attacker!
Re: brute force attack on /admin
Posted: Mon Oct 25, 2021 9:32 pm
by straightlight
Most configurations seem to be server-related nowadays to protect the stores ...
Re: brute force attack on /admin
Posted: Mon Oct 25, 2021 10:32 pm
by OSWorX
straightlight wrote: ↑Mon Oct 25, 2021 9:32 pm
Most configurations seem to be server-related nowadays to protect the stores ...
Which "configurations" do you mean?
Re: brute force attack on /admin
Posted: Mon Oct 25, 2021 11:08 pm
by straightlight
OSWorX wrote: ↑Mon Oct 25, 2021 10:32 pm
straightlight wrote: ↑Mon Oct 25, 2021 9:32 pm
Most configurations seem to be server-related nowadays to protect the stores ...
Which "configurations" do you mean?
I replied to the previous post. Should of been quoted but I was just following on this. Looks like it's a third-party tool, however.
Re: brute force attack on /admin
Posted: Mon Oct 25, 2021 11:36 pm
by OSWorX
straightlight wrote: ↑Mon Oct 25, 2021 11:08 pm
OSWorX wrote: ↑Mon Oct 25, 2021 10:32 pm
straightlight wrote: ↑Mon Oct 25, 2021 9:32 pm
Most configurations seem to be server-related nowadays to protect the stores ...
Which "configurations" do you mean?
I replied to the previous post. Should of been quoted but I was just following on this. Looks like it's a third-party tool, however.
Congratulations to your post # 20.000 ..
And how many of them are useless?
Re: brute force attack on /admin
Posted: Mon Oct 25, 2021 11:44 pm
by straightlight
OSWorX wrote: ↑Mon Oct 25, 2021 11:36 pm
straightlight wrote: ↑Mon Oct 25, 2021 11:08 pm
OSWorX wrote: ↑Mon Oct 25, 2021 10:32 pm
Which "configurations" do you mean?
I replied to the previous post. Should of been quoted but I was just following on this. Looks like it's a third-party tool, however.
Congratulations to your post # 20.000 ..
And
how many of them are useless?
Only from those who believes.
Re: brute force attack on /admin
Posted: Tue Oct 26, 2021 12:09 am
by Cue4cheap
OSWorX wrote: ↑Mon Oct 25, 2021 11:36 pm
straightlight wrote: ↑Mon Oct 25, 2021 11:08 pm
OSWorX wrote: ↑Mon Oct 25, 2021 10:32 pm
Which "configurations" do you mean?
I replied to the previous post. Should of been quoted but I was just following on this. Looks like it's a third-party tool, however.
Congratulations to your post # 20.000 ..
And how many of them are useless?
LOL
Exactly.
Re: brute force attack on /admin
Posted: Tue Oct 26, 2021 3:45 am
by cyclops12
Cue4cheap wrote: ↑Tue Oct 26, 2021 12:09 am
OSWorX wrote: ↑Mon Oct 25, 2021 11:36 pm
straightlight wrote: ↑Mon Oct 25, 2021 11:08 pm
I replied to the previous post. Should of been quoted but I was just following on this. Looks like it's a third-party tool, however.
Congratulations to your post # 20.000 ..
And how many of them are useless?
LOL
Exactly.

Re: brute force attack on /admin
Posted: Fri Nov 05, 2021 3:44 am
by messor
1 Use strong password
2 Change all default login like admin/support
3 Change default admin path
4 install some security plugin like
https://www.opencart.com/index.php?rout ... n_id=42800