since 2010 | 2726 reviews | 4.9/5 rated
Marco
Watch PRo for Magento 1
Wery good, stop to bad access




While the free extension Watchlog lists the IPs that try to access your Magento back office, Watchlog PRO will also help you to stop these intrusion attempts.
Watchlog PRO is a more complete version that offers more options than Watchlog.
|
Watchlog |
Watchlog Pro |
|
|
Connection attempts charts Check the daily and monthly login attempts charts. |
||
|
Connection attempts tables Get detailed and summarized tables of the login attempts data. |
||
|
Connection attempts history Define the history lifetime and receive periodical reports. |
||
|
Blacklist and Whitelist Create a whitelist and a blacklist of IPs, allow access to whitelisted IPs only. |
||
|
Automatically or Manually block IPs Block IPs after X login attempts, block the blacklisted IPs for X minutes. |
Thousands of Magento websites are certainly concerned by this very large brute force attack which aim is clearly to force access to Magento back offices.
The principle of that kind of attack is simple: robots try to log into your back office using multiple login/password combinations until they find the correct credentials.
Once these credentials are identified, your Magento website becomes easy prey for hacking: exploitation of your database, diversion of your payments, hacking, unfair competition...
At Wyomind, our paid software is delivered with a module named Notification Manager. It keeps you informed about the new updates of our extensions.
This extension is available from your back office in:
System › Configuration › Wyomind › Notification Manager
It lets you choose which extension you wish to receive notifications.

In order to feed custom notifications to your back office, this extension retrieves our RSS feed (https://www.wyomind.com/rss.xml) just like Magento RSS feed (https://magento.com/blog/feed) each time someone or any robot tries to log into your back office.
If you want more information on how RSS feeds and notifications work within Magento, you can read the very complete article of Nick Jones (Magento Certified Specialist).
This implementation choice has underlined some considerable peaks of requests concerning thousands of websites and implying repetitive login attempts.
These login attempts can recur several times a minute and can reach several tens of thousands of attempts every day which will deeply threaten the security of your website as you can see on the screen below.

Several users have already reported some IPs as you can see on the below screen.

If you received a message from us, it means we have noticed an abnormally high number of requests. In that case, you can install our free Watchlog extension to detect and track the intrusions into your back office.

It is quite difficult to detect and to implement a firewall against that kind of attack for the following reasons:
Fortunately, these attacks are easy to bypass! Several solutions exist to make your back office invisible to robots that try to log in:
Watchlog PRO is an extension for Magento that is easy to use. You'll be able to see very quickly if your Magento Backoffice is threatened by a brute force attack and if someone or some robots are trying to log into your Magento admin panel.
You can start with configuring your extension in a general way in:
System › Config › Wyomind › WatchLog

In the Connexion attempts history tab, you'll be able to configure a certain number of parameters.

History lifetime in days: You have the possibility to define a history lifetime in days in order to purge the history. For example, you'll be able to define the history lifetime on 30 days in order to remove automatically all the login attempts that are older than 30 days.
Send a periodical report: You can choose to receive periodical reports. If you have decided to set that option to YES, then you'll have to define:

In the White/Blacklist settings tab, you also have the possibility to create a whitelist as well as a blacklist.
You have to fill in a certain number of fields:

You'll have a global overview of the login attempts executed from your admin panel login page, if you go to:
System › Watchlog
Statistics on the login attempts will be displayed in graphs and tables.
You should get two graphs that recap the login attempts statistics on two different periods of time in order to give you the best possible view. The first chart will display the data on 30 days whereas the second one will sum up the login attempts in 24 hours.

On both graphs, you'll have several curves:
You should find the summary of the last days within two different views:
You'll know in both views if you have blacklisted or whitelisted some IPs from:
System › Config › Wyomind › Watchlog
The IP will be displayed in colored boxes:

In the summarized view, IPs will be in white or black boxes only if when they tried to log in, they were already defined as whitelisted or blacklisted IPs.
Note that in the case where an IP is whitelisted and blacklisted at the same time, the whitelist will always have the upper hand.
In the Detailed View, you'll find a detailed table of the login attempts. Among that grid, you'll have several data:

By clicking on Switch to the summarized view you should get a table with the basic information. You'll find:

By default, both tables display data for the last 30 days. You can edit that in the History lifetime in days field, from:
System › Config › Wyomind › WatchLog
At any time you can switch between both views.
This extension works with Magento Community Edition and also Magento Enterprise Edition. To know if Watchlog Pro is compatible with your Magento version, please check the Compatibility tab.
While the free extension Watchlog lists the IPs that try to access your Magento backoffice, the Watchlog PRO extension will also help you to stop these intrusion attempts.
As you can see on the below table, Watchlog PRO is a more complete version that offers more options than Watchlog.
|
Watchlog |
Watchlog Pro |
|
|---|---|---|
|
Connection attempts charts Check the daily and monthly login attempts charts. |
||
|
Connection attempts tables Get detailed and summarized tables of the login attempts data. |
||
|
Connection attempts history Define the history lifetime and receive periodical reports. |
||
|
Blacklist and Whitelist Create a whitelist and a blacklist of IPs, allow access to whitelisted IPs only. |
||
|
Automatically or Manually block IPs Block IPs after X login attempts, block the blacklisted IPs for X minutes. |
The Watchlog PRO extension allows you to check if your website is attacked and at the same time to stop these connection attempts by blocking the IPs that try to access your backoffice.
You can in a first time install the free Watchlog extension which will allow you to check if your website is targeted by that attack.
We offer our customers who want to migrate their Magento 1 license to a Magento 2 license, the transfer at a reduced price.
You have the possibility to migrate your license directly from your Wyomind account in:
My account › Licenses & Downloads
Click on migrate to magento 2 in front of the extension and the domain you want to transfer.

Confirm you want to migrate your license to a Magento 2 license by clicking on Confirm and checkout .

An invoice will be automatically added to your account from:
My account › Invoices
The price of the transfer is equivalent to a 30% reduction compared to the price of the regular Magento 2 license.
You can proceed to the payment by clicking on PP .

Once the payment is done, you can go back to:
My account › Licenses & Downloads
There you will be able to download and install your license for Magento 2.

A license is valid for an unlimited period of time on one single Magento installation.
If you use more than one Magento installation, you will have to buy a separate license for each one.
If you run several domains on the same Magento installation, you will need only one license for all of them.
Although your license doesn’t have a limited period of validity, your support period does. By purchasing an extension, you’ll be granted a 6-month support period for free. Passed this period, you will have to renew your Support plan (see FAQ: How to extend my support period?).You can pre-register your live domain to your license in advance.
Thanks to this option, you'll be able to get the extension ready to use on your domain before it goes live.
To pre-register your production domain:
next to the extension you want your domain to pre-register on.

One license is valid for an unlimited period of time on one Magento installation only.
It is possible, however, to extend or transfer your license in 2 cases:
To be able to use Watchlog Pro on both your production and testing environments, follow the instructions below:
Now that you can use Watchlog Pro on your production environment, repeat the same steps as above on your testing environments.
The only difference this time: a notification will appear in your Magento admin.
You will be given a choice between:

Click on Add this domain to my license.
A transfer request will then be sent to our team within an hour.
Once the request is taken care of, you will receive a confirmation email.
If your transfer request is accepted, you can use Watchlog Pro on both environments at the same time.
The order in which you activate your license on your domains does not matter.In order to download Watchlog Pro, log into your Wyomind account:
icon next to Watchlog Pro.
A new window opens.

Your download can start.
When purchasing an extension from wyomind.com, you benefit from a lifetime upgrade. You can at any time download the latest version of the extension directly from your account.
To upgrade Watchlog Pro, follow the steps below:
next to Watchlog Pro.
To uninstall Watchlog Pro, go on its zip folder and open it.
You will find a shell file (such as: yourextension-uninstall.sh) that you must execute on both your server and Magento root directory.
Once the uninstallation is over, refresh your cache and enable the compiler back again (if you use it).
Before installing Watchlog Pro, you’ll have to:
Now you can install Watchlog Pro:

Next step is to activate your license, to do so, click here: Extension activation
Once Watchlog Pro is installed, you have to activate the license:

configuration › advanced › advancedIf the message doesn't appear then you must check that:
Wyomind's License Manager has not been removed from your installation.
Wyomind's License Manager is enabled in: app/etc/modules/Wyomind_Licensemanager.xml
The HTML output for Wyomind_Licensemanager and/or Adminhtml_Notification are not disabled in your system under: system





To activate the license of an extension that includes other modules, you’ll have to repeat the steps described above for each extension, using the corresponding activation keys (each module has its own activation key).
If your IP address is blacklisted, you can at any time use your secret key to return to the admin.
You should have defined your secret key in the White/Black list settings tab from:
System › Config › Wyomind › Watchlog

You need to use the following url:
https://www.example.com/watchlog/whitelist/add/key/{{YOUR SECRET KEY}}
In our example, we should browse: https://www.mywebsite.com/watchlog/whitelist/add/key/alabama
This will automatically add your IP to the whitelist.
If your site crashes and gives this error message after uploading all files to the correct folders:
Fatal error: Class 'Wyomind_Notificationmanager_Model_Resource_Setup' not found in includes/src/Mage_Core_Model_Resource_Setup.php on line 234
It probably comes from installing an extension while the compiler is still enabled.
Important note:
Here is how to disable the Magento compiler:
define('COMPILER_INCLUDE_PATH', dirname(__FILE__).DIRECTORY_SEPARATOR.'src');define('COMPILER_COLLECT_PATH', dirname(__FILE__).DIRECTORY_SEPARATOR.'stat');
to get:
#define('COMPILER_INCLUDE_PATH', dirname(__FILE__).DIRECTORY_SEPARATOR.'src');#define('COMPILER_COLLECT_PATH', dirname(__FILE__).DIRECTORY_SEPARATOR.'stat');
If you're getting a white page using the extension, you should enable the error reporting in order to display the error. You can do that from index.php.
This issue may be due to a problem during the installation process.
You can fix it by following these steps:
Be careful, that entry depends on your extension. For example, if you have the extension called Simple Google Shopping, you should delete simplegoogleshopping_setup.
Marco
Wery good, stop to bad access
John
I recommend this extension for every Magento site owner, Watchlog is a must have extension. I am using it for a few years now and it gives peace of mind about my sites security. Watchlog gives perfect information about login-attempts including IP address (with a direct link to an abuse database) and url where the attempt was made. The extension blocks every brute force attack after a few tries and with the Ip address info it gives it makes it easy to block access to my server via my firewall.
Szymon
This extension for Magento is very very helpful. Every day blocked many logins and IP's. Best security system for my stores. It blocks access and I do not have to worry. Previously, I had to block manually. Now the matter has been settled!
Iain
Give us peace of mind that our Magento sites are secure. The daily reports via email provide a quick overview. I would recommend this to any Magento store owner. Currently, we have 3 sites secured using WatchLog Pro.
Adam
This is a must have extension for Magento. Not only does it give you a real time view of any brute force hack attempts but also cuts them off as advertised. I would whole heartedly recommend this extension to any Magento site owner/developer
Ken
I use the Wyomind Watchlog Pro extension because there is no other module like it. It has alerted us several times to multiple attempted unauthorized login attempts.I highly recommend this extension. Wyomind has a support staff as well.
Al
We were already using Watchlog as had a number of other modules from Wyomind before and it was installed from them. We recently got hit by a Brute Force Attack on locations which are vulnerable in Magento1. We upgraded to Watchlog pro and had peace of mind that the IPs were being automatically blocked. Over 45K Connections per day .. had to upgrade the server software so it didnt fold. Wyomind support is always prompt and helpful. Would recommend this company for any Magento modules. The build good stuff, and then support which is vital when adding additional features to your Magento Store. Got a small glitch with the cron firing every 30mins and sending me notification emails... still not figured that one out yet but will resolve with Wyomind support soon.
Michele
Brute force attacks are daily news nowadays and, besides not always needing worrying (if set up is safe) for every attempt, having a dog barking in the garden is useful, so that you might know if there actually is something going wrong or not. And with the increasing number of Magento installations, you risk entering the attackers attention With WatchLogPro you can anyway easily block any attempt, even if coming from different IPs, and make attackers look somewhere else. It is also good to keep track of who accessed your backend, from where, and when... The name says it all: it's a WatchDog+Logger..
Sander
Have been using extensions form Wyomind for 2 years now. Absolute stable and greatly thought through! Watchlogpro gives me the security my site really needs.
Darren
We have had major attacks over the past months and even though the free version lets you know this, we couldn't risk ignoring this and upgraded to the pro. It's a fantastic tool and would recommend it to anyone. It uses a simple UI so no confusion to blocking I'P's on the fly. Keep up the good work.
Art
Watchlog helped to define competitors who were trying to scrape our prices and hack our admin area, so we were able to adjust our firewall, without going deep into server logs!
Michael Netherton
Only today I received nearly twenty email from Watchlog that an IP had been blocked after 10 attempts. It offers peace of mind knowing that someone is watching the back door and keeping the site secure. I can only imagine how bad it would be without this extension.
BSA
After install I have solved my security problems
mickymix
Well,
it all started when the ISP told me (lucky me I was told) the website was under a massive attack from foreign countries...
I've installed the FREE version of this useful extension, which gave me the idea of the dimensions of the attack.
I immediately thought about the costs of recovering a possible take down and I decided the cost of this extension could be worth the risk.
I can assure you now I can sleep perfectly, without any worrying about it.
I just check the report every morning, just to notice who should come in did with no problem and who should stay out, STAYED OUT ! :-)
To be honest I've faced some troubles during install due to the presence of some other extension, but the support team did a great job within minutes and I barely remember this...
Would buy again...
cheffe00
We installed this extension after a brute force attack. The installation was easy and done in a few minutes. I was not sure about the correct configuration so that I had to sent an e-mail to the support team. Paul from WYOMIND completed the configuration for me with no extra costs!
DVJN
Works as described. As always Wyomind was very quick to react when I needed some support.
Initial release for the master version
Initial release for the legacy version
Patch:
Patch:
Specific needs or any ideas of enhancements and new features to add to the extension? Tell us more, we'll get back to you shortly!