How to stop wordpress brute force attack
1. Use a strong password Minimum password recommendations: - At least 8 characters total - Mixture of upper and lower-case letters - Numbers, punctuation or other non-alphanumeric characters Example weak password: secret1 Improved strong password: Z#hupsZ2M4!Z 2. Change default WordPress admin username When installing WordPress by default the administrator user has the username of admin. The botnet attack is currently only targeting this default username, so even having an administrator username of admin123 could signifiantly reduce the likilhood of your site being succesfully logged into by a malicious user. 3. Lock down WordPress admin access with .htaccess Utilizing a WordPress brute force plugin for this type of attack is not very efficient, and in some cases can actually lead to your site becoming unavailable due to the large amount of processing power used to attempt to challenge each and every malicious login attempt. Instead you should rely on the informat...