Anti-hammering / Login blocker
- Moodle 1.9–5.1
- 更新 2025-12-10
The Sebsoft Anti Hammering Authentication Plugin offers you the possibility to prevent hammering your login system.
This plugin can be configured to “smart detect” so called hammering on IP basis or for users in general.
SEBSOFT ANTIHAMMER PLUGIN
The Sebsoft Anti Hammering Authentication Plugin offers you the possibility to prevent hammering your login system.
This plugin can be configured to “smart detect” so called hammering on IP basis or for users in general.
Hammering is the process of pretty much brute force attacking Moodle’s login system.
This plugin detects the IP address of the remote client, and will track the entered username (and, if the
username exists, also the Moodle userid) and stores it’s information to block the user and/or IP address
depending on the configuration of your authentication plugin.
When the plugin has been installed, you should enable or disable blocking by IP and/or username and
configure the timespan at which detection is valid and number of times an attempt can be made.
This plugin can also be configured to make use of the messaging API in moodle.
This is a specific setting that needs to be enabled; if not configured the messaging API will not be used.
Please note receiving messages is not configured for everybody by default. Every applicable person (usually
administrators) MUST configure their preferences if they’d like to receive these messages.
Moodle’s lockout system vs Antihammer :
Moodle already has the capability to (temporarily) lock out users https://docs.moodle.org/30/en/Site_policies#Account_lockout )
However, this plugin will add to that functionality, enabling to also take a look at specific IP usage of users trying to login.
There is *no* interaction with the lock out users system of Moodle.
If you want to be able to use the default method of Moodle account locking, but want to use