brute-force-block
Reactive icon

Brute Force Block

Stable version 1.0.0 (Compatible with OutSystems 11)
Uploaded
 on 02 March 2023
 by 
0.0
 (0 ratings)
brute-force-block

Brute Force Block

Documentation
1.0.0

Configure Brute Force Block

The protection against brute force attacks is configurable. To change the behavior, proceed as follows:

  1. Log in to Brute Force Block.
  2. Go to Configuration Menu.
  3. Select the Type of Brute Force you want to configure
  4. Configure the protection described in the table below.
FieldDescription
Invalid Check Window In MinutesTime frame in minutes in which failed attempts are accounted.
Default value is 60 minutes.
First Backoff Delay In SecondsAfter hitting the first backoff, it's the time that IP address/ Mobile attempts are blocked.
The default value is 300 seconds.
Second Backoff Delay In SecondsAfter hitting the second backoff, it's the time that IP Address/ Mobile attempts are blocked.
The default value is 3600 seconds.
Max Attempts First BackoffThe number of attempts for an IP address/ Mobile Phone after which the first backoff is triggered.
The default value is 20 times.
Max Attempts Second BackoffThe number of attempts for an IP address/ Mobile Phone after which the second backoff is triggered.
The default value is 50 times.
Log DaysNumber of Days the brute force log should be keep
Block Next AttemptsAfter Second Backoff, should the next attempts be blocked?
EnableEnables brute force protection at IP/ Mobile level


Use Brute Force Block

This application has two ways of protection against brute force:

  • IP Address
  1. Reference BruteForce_API, Service Action CheckBruteForceAttempt_IP_Service
  2. Reference HTTPRequestHandler, Server Action GetIP
  • Mobile Phone
  1. Reference BruteForce_API, Service Action CheckBruteForceAttempt_MobilePhone_Service


Log Brute Force Blocked

You can check the Brute Force Requests blocked and unblock them manually. To check the logs, proceed as follows:

  1. Log in to Brute Force Block.
  2. Go to Log Menu.