Large WordPress distributed brute force attack underway

Habitual · 02-10-2014, 12:30 PM

Large distributed brute force attack underway

looks to be massive.
If you don't have Wordfence (a product I do recommend) then use this in your .htaccess of apache|http conf file to keep knuckleheads out.

Code:

<Files wp-login.php>
order deny,allow
deny from all
allow from xx.yy.zz.aa             # Comment0
Allow from aaa.bbb.ccc.ddd        # Comment1
</Files>

multiple allow stanzas are ok.

If you use that in your apache|http conf file, be certain to restart your web-server software.

You'll see entries like these in your server logs:

Code:

[Mon Feb 10 07:30:21 2014] [error] [client 146.0.74.202] client denied by server configuration: /var/www/cirrhus9/wp-login.php
[Mon Feb 10 08:04:08 2014] [error] [client 146.0.78.9] client denied by server configuration: /var/www/cirrhus9/wp-login.php

after you implement this.

unSpawn · 02-11-2014, 02:52 PM

Thanks for the heads up but IMNSHO by now one should be marked as criminally negligent if they didn't shield their wp admin stuff already. That's just plain asking for trouble.

Habitual · 02-11-2014, 05:40 PM

You're preaching to the choir Brother!

But I had to offer some solution, as someone in 10 years from now will do an IIGC and find "knucklehead" on this site.

Preach On!