MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
How to block brute-force attack on Wordpress
Thread Rating:
- 0 Vote(s) - 0 Average
- 1
- 2
- 3
- 4
- 5
How to block brute-force attack on Wordpress
|
Posts: 9
Threads: 4
Joined: Jun 2021
Reputation:
0
Hi,
For those who have a server that running with CSF, this is how to block WordPress login attack.
/usr/local/csf/bin/regex.custom.pm
Code: if (($globlogs{CUSTOM4_LOG}{$lgfile}) and ($line =~ /(\S+).*] "POST \/wp-login\.php.*" 200/)) {
return ("Failed Wordpress login from",$1,"wordpress","5","80,443","3600");
}
You can replace 3600 with 1 if want to block IP permanently.
/etc/csf/csf.conf
Code: CUSTOM4_LOG = "/var/log/apache2/domlogs/*/*"
The load on the server will not high. Mine load only load average: 9.78, 10.68, 10.16.
You can check this using tail -f /var/log/lfd.log
Cheers!
Posts: 16
Threads: 5
Joined: Jun 2021
Reputation:
0
Don't forget to put your country code under CC_ALLOW to avoid your country blocks.
Posts: 6
Threads: 3
Joined: Jun 2021
Reputation:
0
(06-28-2021, 01:13 PM)StevenB Wrote: Hi,
For those who have a server that running with CSF, this is how to block WordPress login attack.
/usr/local/csf/bin/regex.custom.pm
Code: if (($globlogs{CUSTOM4_LOG}{$lgfile}) and ($line =~ /(\S+).*] "POST \/wp-login\.php.*" 200/)) {
return ("Failed Wordpress login from",$1,"wordpress","5","80,443","3600");
}
You can replace 3600 with 1 if want to block IP permanently.
/etc/csf/csf.conf
Code: CUSTOM4_LOG = "/var/log/apache2/domlogs/*/*"
The load on the server will not high. Mine load only load average: 9.78, 10.68, 10.16.
You can check this using tail -f /var/log/lfd.log
Cheers!
Working perfectly thanks, been having so many issues with WP lately.
Posts: 9
Threads: 4
Joined: Jun 2021
Reputation:
0
(06-28-2021, 01:13 PM)StevenB Wrote: Hi,
For those who have a server that running with CSF, this is how to block WordPress login attack.
/usr/local/csf/bin/regex.custom.pm
Code: if (($globlogs{CUSTOM4_LOG}{$lgfile}) and ($line =~ /(\S+).*] "POST \/wp-login\.php.*" 200/)) {
return ("Failed Wordpress login from",$1,"wordpress","5","80,443","3600");
}
You can replace 3600 with 1 if want to block IP permanently.
/etc/csf/csf.conf
Code: CUSTOM4_LOG = "/var/log/apache2/domlogs/*/*"
The load on the server will not high. Mine load only load average: 9.78, 10.68, 10.16.
You can check this using tail -f /var/log/lfd.log
Cheers!
1. Use strong login credentials
2. Hide WordPress login page
3. Two-factor Authentication
|
Users browsing this thread: 1 Guest(s)