{"id":1298,"date":"2013-04-13T07:55:49","date_gmt":"2013-04-13T12:55:49","guid":{"rendered":"http:\/\/patrioticfederalist.com\/wp\/?p=1298"},"modified":"2013-05-08T20:44:59","modified_gmt":"2013-05-09T01:44:59","slug":"wordpress-admin-page-being-redirected-due-to-brute-force-attempts","status":"publish","type":"post","link":"http:\/\/patrioticfederalist.com\/wp\/?p=1298","title":{"rendered":"WordPress Admin Page Being Redirected Due To Brute Force Attempts"},"content":{"rendered":"

Some idiots are always trying to brute force all WordPress pages by attempting to login as “admin<\/strong>.”\u00a0 Rather than reinvent the wheel, Immotion<\/a> explains it pretty well:<\/p>\n

What is a Brute Force Attack?<\/strong><\/p>\n

One of the methods to gain information -primarily LOG-IN information – is by using a method called BRUTE FORCE<\/strong> attack.\u00a0 Basically, as the name suggests, they are not hiding the attack, and there’s no efficiency to the attack. You could say it’s like taking the “shotgun approach.”\u00a0 It simply is hitting the server looking for one thing, the correct login information for your WordPress site.\u00a0 Hackers will often infect other computer systems and then set them to attempt logging into the WordPress Administrator.\u00a0 The illustration below shows graphically how the attack traffic can come from many locations and be mixed with normal website traffic.\u00a0 The attack can also come from just one location, but the method of trying to crack the login is the same – it is simply going through a sequential search for your login.\u00a0 Brute force attacks can also increase resource usage of the website.\u00a0 Therefore, brute force attacks are not only trying to crack through your security, but they are also driving up resource usage when multiple attempts on the WordPress login is occurring.<\/p>\n

 <\/p>\n

\"brutef\"<\/a><\/p>\n

 <\/p>\n

Preventing WordPress Brute Force Attacks<\/strong><\/p>\n

Since users are no longer using WordPress as simply a blogging solution, there isn’t as much emphasis on user management for the owners of the WordPress site.\u00a0 And this may also be a contributing factor to the problem.\u00a0 WordPress Site Administrators should regularly cycle their passwords and review their user lists to make sure that no one has been added that isn’t supposed to be on the list. Especially users added as Administrator-level users.\u00a0 There are also WordPress sites that do not require that people register to post comments or other actions on the website. To prevent unauthorized access we recommend the following:<\/p>\n