Drupal is a registered trademark of Dries Buytaert
drupal 11.3.7 — Update released for Drupal core (11.3.7)! drupal 11.2.11 — Update released for Drupal core (11.2.11)! drupal 10.6.7 — Update released for Drupal core (10.6.7)! drupal 10.5.9 — Update released for Drupal core (10.5.9)! cms 2.1.1 — Update released for Drupal core (2.1.1)! drupal 11.3.6 — Update released for Drupal core (11.3.6)! drupal 10.6.6 — Update released for Drupal core (10.6.6)! cms 2.1.0 — Update released for Drupal core (2.1.0)! bootstrap 8.x-3.40 — Minor update available for theme bootstrap (8.x-3.40). menu_link_attributes 8.x-1.7 — Minor update available for module menu_link_attributes (8.x-1.7). eca 3.1.1 — Minor update available for module eca (3.1.1). layout_paragraphs 2.1.3 — Minor update available for module layout_paragraphs (2.1.3). ai 1.3.3 — Minor update available for module ai (1.3.3). ai 1.2.14 — Minor update available for module ai (1.2.14). node_revision_delete 2.0.3 — Minor update available for module node_revision_delete (2.0.3). moderated_content_bulk_publish 2.0.52 — Minor update available for module moderated_content_bulk_publish (2.0.52). klaro 3.0.10 — Minor update available for module klaro (3.0.10). klaro 3.0.9 — Minor update available for module klaro (3.0.9). layout_paragraphs 2.1.2 — Minor update available for module layout_paragraphs (2.1.2). geofield_map 11.1.8 — Minor update available for module geofield_map (11.1.8).
← All modules

flood_control

31,450 sites Security covered
View on drupal.org

Drupal's built-in flood protection blocks login attempts after repeated failures – but provides no interface to configure limits or unblock affected users. Flood Control fills that gap with an intuitive admin UI for managing brute-force protection settings and unlocking blocked IPs.

Features

  • Configurable limits – Set login attempt thresholds per IP address and per username
  • Time window control – Define how long blocks remain active
  • IP allowlist – Exempt trusted IPs or ranges from flood protection
  • Unblock interface – View, filter, and remove blocked entries with one click
  • Contact form protection – Limit email submissions when Contact module is enabled
  • Drush commands – Manage flood entries from the command line
  • No external dependencies – Works with Drupal core only

Why You Need This

When legitimate users get locked out after mistyping their password, there's no core UI to help them. Flood Control gives administrators the tools to:

  • Quickly unblock users without database access
  • Whitelist office IPs to prevent accidental lockouts
  • Fine-tune security thresholds for your specific needs

Requirements

  • Drupal 10.2+ or Drupal 11

Documentation

Full documentation is available in the README file, covering:

  • Configuration options and recommended settings
  • IP allowlist format (single IPs and ranges)
  • Drush commands for automation
  • Permissions overview

Related Modules

  • Login Security – Additional login protection like access denial and notifications
  • CAPTCHA – Challenge-response tests to prevent automated submissions
  • Honeypot – Invisible spam prevention using hidden form fields
  • Perimeter – IP-based access control and blocking

Sponsors

Development sponsored by Finalist, a Dutch Drupal agency specializing in custom solutions for the education and healthcare sectors.

Activity

Total releases
1
First release
Feb 2026
Latest release
1 month ago
Release cadence
—
Stability
100% stable

Releases

Version Type Release date
3.0.1 Stable Feb 20, 2026