since 2010 | 2726 reviews | 4.9/5 rated
JM Dimensions ApS
Really great watchlog
This is really a need to have module within the standard Magento.
But it's great to have a free version here.
Thanks again






Watchlog is a free and easy to use extension for Magento 2. You'll be able to see very quickly if your Magento 2 back office is threatened by a brute force attack and if someone or some robots are trying to log into your Magento 2 admin panel.
To install the Watchlog free extension on your Magento 2 admin, follow the below steps:
bin/magento setup:upgrade
You can start with configuring your extension in a general way in:
Stores › System › Config › Wyomind › WatchLog
In the Connection attempts history tab, you'll be able to configure a certain number of parameters.
You can choose to receive periodical reports. If you have decided to set that option to YES, then you'll have to define:
You'll then receive a report as below.

You'll have a global overview of the login attempts executed from your Magento 2 admin panel login page if you go to:
Stores › Watchlog › Connection attempts
Statistics on the login attempts will be displayed in graphs and tables.
You should get two graphs that recap the login attempts statistics on two different periods of time in order to give you the best possible view. The first chart will display the data in the last 30 days whereas the second one will sum up the login attempts in the last 24 hours.
On both graphs, you'll have several curves:
You should find the summary of the last days within two different views:
In the Detailed View, you'll find a detailed table of the login attempts. Among that grid, you'll have several data:

By clicking on Switch to the summarized view you should get a table with the basic information. You'll find:
By default, both tables display data for the last 30 days. You can edit that in the History lifetime in days field, from:
Stores › System › Config › Wyomind › WatchLog
At any time you can switch between both views.
Magento offers three variations of its product.
As their names have changed over the past few years, here is a recap:
A license is valid for an unlimited period of time on one single installation
You can pre-register your live domain to your license in advance.
Thanks to this option, you'll be able to get the module ready to use on your domain before it goes live.
To pre-register your production domain:


One license is valid for an unlimited period of time on one installation only. However, it is possible to extend or transfer your license in 2 cases:
To be able to use Watchlog on both your production and testing environments, follow the instructions below:
In order to download Watchlog, log into your Wyomind account:
Only the latest extension version released within your Support & Upgrade period is available. In order to get the very latest extension version make sure your Support & Upgrade plan is up to date.
When purchasing a module from wyomind.com, you benefit from 12 months of upgrade. Within this period you can at any time download the latest version of the module directly from your account.
To upgrade Watchlog, follow the steps below:

You can install Watchlog manually.
bin/magento setup:upgrade
If you are using a production mode, execute also:
bin/magento setup:static-content:deploy
bin/magento setup:di:compile
You can install Watchlog using Composer software in two cases:
composer config repositories.wyomind composer https://repo.wyomind.com
composer require wyomind/watchlog
bin/magento setup:upgrade
bin/magento setup:static-content:deploy
bin/magento setup:di:compile
To uninstall Watchlog, start with disabling the extension running the following command:
bin/magento module:disable Wyomind_Watchlog
Then, you have 2 ways to uninstall the extension depending on how the extension has been previously installed:
Run the watchlog-uninstall.sh file (you can find it in the extension zip folder) from your Magento root directory:
sh watchlog-uninstall.sh
Run the below command line:
composer remove wyomind/watchlog
Once the uninstallation is over, refresh your cache and enable the compiler back again (if you use it).
You can install Watchlog via Web Setup Wizard if you purchased it from Magento Marketplace only.
To know how to proceed, all steps are described in the link below:
http://docs.magento.com/m2/ce/user_guide/system/component-manager.html
Next step is to activate your license:
Extension activation
Once Watchlog is installed, you have to activate the license. For previous versions, you can activate the license from your back-office:

<?php
return array(
'backend' => array(
'frontName' => 'admin'
),
'crypt' => array(
'key' => '1e8f3c6772b7a6a6689c3c8cefa4ccf0'
),
/* ... */
)
?>





Add another domain to your license
To activate the license on another domain (test, staging...):

Note that the order in which you activate your license on your domains does not matter. You can start with your staging/dev/local environment or with your live domain, the process will be the same.
Also, if you have loads of staging domains, or if you are an agency managing load of domains for your customers, please contact us so that we can automatically whitelist these domains.Once Watchlog is installed, you have to activate the license.
For this, you can use the below command line (change the Activation key with the corresponding value):
bin/magento wyomind:license:activate Wyomind_Watchlog <YOUR_ACTIVATION_KEY>
To retrieve the list of all the available modules as well as the licenses status, please use:
bin/magento wyomind:license:status
Among the different status, you can find:
To activate several licenses at the same time, use:
bin/magento wyomind:license:activate \
Wyomind_Extension1,Wyomind_Extension2 \
ACTIVATION_KEY_1,ACTIVATION_KEY_2
or:
bin/magento wyomind:license:activate \
Extension1,Extension2 \
ACTIVATION_KEY_1,ACTIVATION_KEY_2
JM Dimensions ApS
This is really a need to have module within the standard Magento.
But it's great to have a free version here.
Thanks again
Prayag Health
Magento 2 merchants must adopt certain best practices to protect the site. While we can focus on keeping the Magento 2 version up-to-date and install security patches on time. Other things are server security, file and folder permissions, etc. We did most of it and felt good. We also modified the admin URL as per some other suggested practices but for reason this can be found by the attackers. You can find some articles on this on web. Finally, we had used the Wyomid Watchlog extension - the Free version. The free version allowed us to see if anyone was trying to brute force the admin page to get access to the admin panel of Magento 2. When we did, we found at least 5 IPs in a duration of about 2 months trying to brute force the panel. We also had 2FA and Google Recaptcha enabled so the attempts were not successful. The plugins recorded the IP, attempts and show those on graph. Very nice. We had some more server and security tools to finally block those IPs outside the module (Free version does not offer that). Even when we changed the admin URL after each attempt, some other IP discovered the URL eventually. Even the Free tool is very useful and we absolutely recommend it since you can change the URL in timely manner and buy some time to implement IP rules on server side which will prevent the site performance degradation for legitimate traffic. But if you don't have other resources at the disposal, I recommend to go for Pro version to perform the URL Blacklisting and Whitelisting from admin panel itself. Again, Wyomind security is a must have extension.
David_happy
We have spent this tool for a long time and it has saved us from many attacks on our website, since it alerts us instantly by email and you can act instantly ... It allows us to be alert 24 hours a day without effort. Extension needed for all magentos ...
Alejandro
Muy buena extension y un excelente servicio técnico.
sonsec
Most mentionable in my case is the support I guess. Yes, the extension is very much useful and works as described. However, WYOMIND's support works even better. Why? Because even on a sunday WYOMIND is not shy of giving full support! Yes, you heard right ... on a "sunday"! Besides, it was a very good, fast and professional support. Thank again, guys!
Roma80
This tool is great for free. It show us an Hacker Attack so we can react fast. Thank you!
adastra
Thanks again to Pierre and his team. I downloaded this extension and literally stopped a brute force attack in under 3 minutes.
Installed in seconds, It gives all the information you need within a few minutes and simply works.
Great free version.
bobmats
Got a message from them about a potential hack attempt. Read an review here this was fake ?
Traced the ip and the ip was on an abuse list.
If the reviewer wrote that was fake it would mean that this developers is faking the attacks ?
What reason just to download a free watchdog extension ?
I placed the attacking ip on a blacklist thru htaccess and attempts were stopped.
So far this company has given me good support and I don't think this is fake or marketing. I never looked at hack attemps but since many systems are under attack why not magento sites.
At least they woke me up so admin url will be changed as will downloader url. I can only see this as a positive reminder to make you installation more secure.. Good work
david_bowen
We run a few sites using the Data Feed Manager from Wyomind for Google Shopping feeds (this works great, can't recommend it enough!)
However I received a notification for all the sites running this plugin yesterday that there were potential brute force attacks on the site to try and gain access to the back end. This is completely untrue, I scoured the logs and there's hardly any attempts in there (with 95% of them being legit attempts to log in).
The fact it happened on all the sites within a few hours suggests this is just a marketing ploy, one which had us receive worried emails from customers (who run the site) about the security of their site (when there was nothing to be concerned about).
So be aware of their work providing false alerts before blindly installing the extension to solve an issue that doesn't exist.
htz
Works exactly as described. Installed without a hitch. Checked the logs after 30 minutes and found there had been around 15 attempted to gain entry via brute force. I blocked the offending IPs in .htaccess. Well worth considering the Pro version for automatic blocking. Recommend this extension to everyone.
JohnWaal
Wyomind warned me about a possible brute force attack on my website, because they saw many login attempts (as they explained, each attempt retrieves their rss feed because I have an other extension from them).
After installing the extension showed the attack and my provider blocked the attackers IP address.
So thanks to Wyomind my website is more secure and the system resources are not used for anything that is not meant to use them.
Initial release for the master version
Initial release for the legacy version
Specific needs or any ideas of enhancements and new features to add to the extension? Tell us more, we'll get back to you shortly!