Problem/Motivation

The CrowdSec module integrates with the CrowdSec platform, which the Drupal Association partnered up with recently.

The CrowdSec module now provides a plugin manager that allows it for other modules like this to leverage this by e.g. sending a signal every time somebody fails in solving a captcha. This could then lead to a scenario where e.g. after 10 failed attempts within a configurable number of minutes, that IP would be banned on the Drupal site for a period of time, and the IP would also be signalled upstream, so that other Drupal sites could benefit from the fact, that an IP is probably brute-forcing Drupal sites.

Proposed resolution

Implement the integration.

Comments

jurgenhaas created an issue.