We recently suffered a brute force login attack on one of my servers which was causing some sites to be unreachable and the server load was sky-high. After installing a logging script on the server we found out that the problem was caused on one installation of WordPress – hackers were using a script to try and guess the password of the admin account. After identifying the problem we were able to prevent this from continuing but not after some downtime to various websites resulting in a loss of income for my company.
In this post I’m going to talk you through a few methods to prevent this so the same doesn’t happen to you.
CHANGE ADMIN USERNAME
This is mentioned all the time, but it really is an important step – don’t use “admin” as your admin username, pick something unique for each site. This was the cause of the problem with my site, I had the admin username as admin so this was the main reason for the attack. Because the hacker knows the username is admin, they are half-way to getting the login details and can use a brute-force script to try many different passwords in combination with the username. If the username is something they don’t know, this type of attack is not really possible.
USING .HTACCESS
If you are using PHP hosting which most WordPress installations will do, you can use a .htpassword file and .htaccess to prevent anyone even loading your wp-login.php file unless they know the username and password to do so – this provides an extra layer of security as there is now two lots of username and passwords to access your WordPress admin area. This is fairly simple to setup, you will need to know the server path to your website which will be something like: home/website
First you need to generate a htpasswd, you can do that on this site. Enter a username, click “Generate Password” and then click “Generate htpassword content” and save the text from the right hand box as a file named .htpasswd ( with no extension ) and upload this to your hosting, outside the public_html directory.
Change “~/.htpasswd” to the location of your .htpasswd file and change “mysecretuser” to the username you chose when creating the htpasswd file.
LIMIT ACCESS TO YOUR ADMIN AREA BY IP ADDRESS
If you are the only person who needs access to your WordPress admin area and you have a static IP address, you can limit access to yourself only by adding a rule in an .htaccess file within your wp-admin directory. The code to use is :
# Block access to wp-admin. order deny,allow allow from x.x.x.x deny from all
Just change x.x.x.x for your actual IP address, which you can find out here.
RECOMMENDED PLUGINS
There are a number of plugins you can use which will further enhance your login security, as follows.
from : http://wplift.com/prevent-bruteforce-login-attacks-wordpress
[quote font=”verdana” font_size=”14″ font_style=”italic” color=”#474747″ bgcolor=”#F5F5F5″ bcolor=”#dd9933″ arrow=”yes” align=”centre”]This Demo Content Brought to you by Momizat Team [/quote]this is tags and keywords : wordpress themes momizat Tutorial wordpress templates
61 Comentários
tadalafil max dose: http://tadalafilonline20.com/ tadalafil pills 20mg
tadalafil gel cheap tadalafil
buy tadalafil us
medications without a doctor’s prescription generic drugs without doctor’s prescription
buying prescription drugs from canada india pharmacy mail order
india pharmacy: https://genericwdp.com/ india pharmacy mail order
prescription drugs online without doctor india pharmacy drugs
best over the counter viagra generic viagra walmart
viagra price
viagra from india cost of viagra
how much is viagra
100mg viagra how much is viagra
best over the counter viagra
generic viagra walmart 100mg viagra
viagra from canada
viagra online usa viagra online usa
best place to buy viagra online
best place to buy viagra online viagra cost
viagra without a doctor prescription usa
viagra price viagra 100mg price
price of viagra
viagra amazon where can i buy viagra over the counter
best place to buy viagra online
п»їviagra pills viagra without a doctor prescription usa
when will viagra be generic
viagra over the counter walmart mexican viagra
buying viagra online
viagra without a doctor prescription usa best over the counter viagra
where can i buy viagra over the counter
http://paxil100.com/ – paxil brain zaps
buy online drugs
is propecia a prescription drug buy propecia without prescription
injectable ed drugs
price of valtrex australia price for valtrex
viagra without doctor prescription
http://propeciafavdr.com/ – where to get propecia
buy prescription drugs without doctor
viagra amazon https://viagrapills100.com/ viagra from canada
where can i buy viagra over the counter https://viagrapills100.com/ cheap viagra online
buy viagra online usa https://viagrapills100.com/ viagra cost per pill
where to buy viagra https://viagrapills100.com/ price of viagra
viagra discount https://viagrapills100.com/ viagra from canada
order ed pills buy ed drugs
ed meds pills drugs
ed pills online prescription without a doctor’s prescription
erectile dysfunction medication
buy ed pills cheap ed pills from canada
cheap ed pills
cheap ed pills from canada cheap ed pills from india
cheap ed pills
http://prednisonest.com/# how to purchase prednisone online
buy cheap generic zithromax: buy zithromax online – buy azithromycin zithromax
https://zithromaxst.com/# buy zithromax online fast shipping
http://prednisonest.com/# 20 mg prednisone tablet
hydroxychloroquine where to buy: cheap plaquenil – plaquenil 200 mg
https://hydroxychloroquinest.com/# plaquenil 200mg
https://hydroxychloroquinest.com/# plaquenil 200 mg price uk
http://gabapentinst.com/# neurontin cost in canada
online order prednisone 10mg: generic prednisone – can you buy prednisone over the counter uk
https://zithromaxproff.com/# buy generic zithromax online
zithromax online australia
http://zithromaxproff.com/# zithromax buy
zithromax prescription online
http://zithromaxproff.com/# where to get zithromax
average cost of generic zithromax
tinidazole for sale: order stromectol
generic noroxin
order ceftin: vantin for sale
erythromycin generic
sumycin generic: order ceftin
ceftin for sale
prescriptions from india: all generic meds from india meds from india
india pharmacy drugs: order prescription drugs from india indian online pharmacies review
usa pharmacy india: overseas pharmacies shipping to usa cheap online pharmacies from india
online indian pharmacies: cheap online pharmacies from india online medications from india
erectile dysfunction pills: viagra pills online kamagra pills
buy erectile dysfunction pills online: https://edpillsonline24.com/# best male erectile dysfunction pill
Gгeat web best free dating site for serious relationships you hqve
got here.. It’s hard to find good quality writing ⅼike yоurs these dаys.
I really apppreciate people like yoᥙ! Take care!!
male erectile pills: https://edpillsonline24.com/# male erectile pills
cialis pills: top erectile dysfunction pills levitra pills
free single personal ads
free adult dating
mail order erectile dysfunction pills: https://edpillsonline24.com/# buy erectile dysfunction pills online
viagra walmart viagra without a prescription buying viagra online without prescription
roman viagra: viagra without prescription buy viagra online without prescription
dating seiten
free dating
mail order viagra viagra without a prescription viagra without a doctor prescription canada
generic viagra walmart: non prescription viagra viagra without prescription