Does anyone know of a Django App which can be used to extend django auth and lock accounts if a brute force password guessing attack is mounted?
Ie, an account lockout mechanism that restricts the number of login attempts.
http://pypi.python.org/pypi/django-axes/ is what you are looking for.
I created django-failedloginblocker for this purpose, and used django-brutebuster and, to a lesser extent, django-axes as inspiration.
This one is still maintained (2018): https://github.com/kencochrane/django-defender
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With