{"id":2604,"date":"2013-04-11T22:08:20","date_gmt":"2013-04-12T02:08:20","guid":{"rendered":"https:\/\/www.inmotionhosting.com\/support\/2013\/04\/11\/wp-login-brute-force-attack\/"},"modified":"2024-03-11T16:40:35","modified_gmt":"2024-03-11T20:40:35","slug":"wp-login-brute-force-attack","status":"publish","type":"post","link":"https:\/\/www.inmotionhosting.com\/support\/edu\/wordpress\/wp-login-brute-force-attack\/","title":{"rendered":"WordPress wp-login.php Brute Force Attack"},"content":{"rendered":"
\"\"<\/figure>\n\n\n\n

There have now been several large scale WordPress wp-login.php brute force<\/strong> attacks, coming from a large amount of compromised IP addresses spread across the world since April 2013.<\/p>\n\n\n\n

We first started this page when a large botnet of around 90,000 compromised servers had been attempting to break into WordPress websites by continually trying to guess the username and password to get into the WordPress admin dashboard.<\/p>\n\n\n\n

You can quickly review WordPress login attempts<\/a> to see if your site has recently been under attack.<\/p>\n\n\n\n

Global WordPress brute force attack<\/h2>\n\n\n\n
Please remember these issues are not isolated to InMotion Hosting or our WordPress Hosting<\/a><\/strong>. For example, here is one that was affecting multiple providers<\/a>.\n

\u00a0<\/p>\n<\/div>\n\n\n\n

<\/a>General WordPress brute force protection<\/h2>\n\n\n\n

Please note<\/strong> \u2013 before adding and removing plugins or making changes in general, you should backup your WordPress<\/a> with a reputable plugin.<\/p>\n\n\n\n

While we do HIGHLY<\/strong> recommend implementing as many secure solutions as possible for WordPress, the following guides would be a great first step in protecting yourself and your WordPress site from further attacks.<\/p>\n\n\n\n

\n