Axes is a very simple way for you to keep track of failed login attempts for your login and administration views.
The name is sort of a geeky pun, since it can be interpreted as:
access, as in monitoring access attempts, or
axes, as in tools you can use to hack (generally on wood).
In this case, however, the hacking part of it can be taken a bit further: Axes is intended to help you stop people from hacking your website.
Axes records login attempts to your Django powered site and prevents attackers from brute forcing the site when they exceed the configured attempt limit.
Axes can track the attempts and persist them in the database indefinitely, or alternatively use a fast and DDoS resistant cache implementation.
Axes can be configured to monitor login attempts by IP address, username, user agent, or their combinations.
Axes supports cool off periods, IP address whitelisting and blacklisting, user account whitelisting, and other features for Django access management.
For more information on installation and configuration see the documentation at:
If you have questions or have trouble using the app please file a bug report at:
It is best to separate proposed changes and PRs into small, distinct patches by type so that they can be merged faster into upstream and released quicker:
- code style improvements, and
- documentation improvements.