This is a repost from another forum, from a representative of BeyondHosting.
"As of this week a huge new botnet consisting of over 100,000 compromised servers has began attacking wordpress installs by trying to brute force the login page.
Here are a few key things to prevent you from getting compromised and taken offline.
1. Modify your login username to something secure, not admin1 or weak user. Use a random set of chars if you can or set it to a username that is not easily guessed.
2. Set a secure password on the new user. Utilize password websites such as Strong Password Generator We recommend utilizing a password encryption service such as https://lastpass.com/
3. Make sure you've removed the admin user from your wordpress.
4. Insure wordpress is up to date and all plugins and THEMES are as well.
5. Secure wordpress with .htaccess to block all unknown ips.
.htaccess example.
Code:
<Files wp-login.php> Order Deny,Allow Deny from allAllow from replace-with-your-ip </Files>
If your server becomes heavily loaded with php processes its most likely due to this attack. We are currently receiving almost 1Gbit of traffic solely directed to wordpress sites and submitting password data."
I, like a lot of you, have several WP sites. Protect your site before it is too late! This was posted just a few minutes ago.
"As of this week a huge new botnet consisting of over 100,000 compromised servers has began attacking wordpress installs by trying to brute force the login page.
Here are a few key things to prevent you from getting compromised and taken offline.
1. Modify your login username to something secure, not admin1 or weak user. Use a random set of chars if you can or set it to a username that is not easily guessed.
2. Set a secure password on the new user. Utilize password websites such as Strong Password Generator We recommend utilizing a password encryption service such as https://lastpass.com/
3. Make sure you've removed the admin user from your wordpress.
4. Insure wordpress is up to date and all plugins and THEMES are as well.
5. Secure wordpress with .htaccess to block all unknown ips.
.htaccess example.
Code:
<Files wp-login.php> Order Deny,Allow Deny from allAllow from replace-with-your-ip </Files>
If your server becomes heavily loaded with php processes its most likely due to this attack. We are currently receiving almost 1Gbit of traffic solely directed to wordpress sites and submitting password data."
I, like a lot of you, have several WP sites. Protect your site before it is too late! This was posted just a few minutes ago.
Dislike ads? Become a Fastlane member:
Subscribe today and surround yourself with winners and millionaire mentors, not those broke friends who only want to drink beer and play video games. :-)
Membership Required: Upgrade to Expose Nearly 1,000,000 Posts
Ready to Unleash the Millionaire Entrepreneur in You?
Become a member of the Fastlane Forum, the private community founded by best-selling author and multi-millionaire entrepreneur MJ DeMarco. Since 2007, MJ DeMarco has poured his heart and soul into the Fastlane Forum, helping entrepreneurs reclaim their time, win their financial freedom, and live their best life.
With more than 39,000 posts packed with insights, strategies, and advice, you’re not just a member—you’re stepping into MJ’s inner-circle, a place where you’ll never be left alone.
Become a member and gain immediate access to...
- Active Community: Ever join a community only to find it DEAD? Not at Fastlane! As you can see from our home page, life-changing content is posted dozens of times daily.
- Exclusive Insights: Direct access to MJ DeMarco’s daily contributions and wisdom.
- Powerful Networking Opportunities: Connect with a diverse group of successful entrepreneurs who can offer mentorship, collaboration, and opportunities.
- Proven Strategies: Learn from the best in the business, with actionable advice and strategies that can accelerate your success.
"You are the average of the five people you surround yourself with the most..."
Who are you surrounding yourself with? Surround yourself with millionaire success. Join Fastlane today!
Join Today
