Fail2Ban to stop bruteforce Modx Manager logins?

Hi I wondered if anyone has any filters/rules to enable Fail2Ban for modx? Any help is appreciated.

Thanks.

Hi, you can change the name of the folder containing the manger login form. Like this no one except you can know where is the manager access.
No more brutforce !

You can also put in a hook to check IP address on login, that way you can lock your manager down to an IP whitelist.

If you do all 3 of the above - your manager will be bullet proof

MODX automatically blocks users for an hour (you can make it longer) after three failed login attempts so attempts with a particular username won't get very far.

BotBlockX blocks users by IP who make too many visits in too short a time, so that's another way to deal with brute force attacks.


As Steeve suggests, renaming the Manager is also a great defense (as is using a non-dictionary, non-common-name term for your Manager username).