Smart IP Blocker
Automatically blocks IP addresses that exceed a defined request rate threshold.
This extension enhances your protection against brute-force attacks and traffic abuse as part of the Fortify suite.
Security Dashboard Widget
Fortify includes a built-in dashboard widget that gives you a real-time overview of your system’s security status.
- Highlights critical vulnerabilities and misconfigurations
- Provides quick access to all security checks and tools
- Helps you identify and fix issues in one place
This widget acts as a central hub, allowing you to monitor and manage your application's security at a glance.
Features
- Automatic IP blocking based on request rate
- Configurable request thresholds
- Protection against DDoS and brute-force attacks
- Works together with IP Blocker for manually protection
Related Plugins
- Fortify – comprehensive security suite for October CMS
- Admin IP Access – restrict admin panel access by IP
- IP Blocker – manually block specific IP addresses
- Input Sanitizer – block and sanitize malicious input
- CSP – add Content Security Policy headers to prevent XSS
Requirements
- PHP 8.2 or higher
- October CMS 3.0 or higher
Questions? Need help?
If you have any questions about how to use this plugin, feel free to contact wobqqq@gmail.com.
The following plugin is required
Installation via Command Line
php artisan plugin:install Wobqqq.FortifySmartIpBlocker
Usage
After installing, all configuration and management is handled via the October CMS admin panel.
Admin Panel:
Navigate to Settings -> Fortify and enable Smart IP Blocker. Configure request limits in the interface.
Console Commands:
- Remove an IP from the block list:
php artisan wobqqq.fortify:smart-ip-blocker:remove-ip {ip}
- Disable Smart IP Blocker module:
php artisan wobqqq.fortify:smart-ip-blocker:disable
-
Gara
Found the plugin useful on 25 Apr, 2026
Cool plugin that helps protect the site from DDoS attacks and annoying bots. Works automatically and does its job well!
-
| 1.0.4 |
Composer installs the Fortify core with the module; releases are published on GitHub Sep 30, 2026 |
|---|---|
| 1.0.3 |
The request limit is counted per minute, a banned visitor gets 429 with Retry-After, excluded headers match a part of the value, the settings are validated on every save and applied as soon as they are saved Sep 30, 2026 |
| 1.0.2 |
Changes in events Apr 03, 2026 |
| 1.0.1 |
First version Mar 28, 2026 |