Brute Force techniques
-
Hello.
Firstly thanks for creating a superb plugin. Credit to all those involved.
To stop a lot of brute force attacks I’ve generally created obscure (but memorable) usernames.
By enabling…
“Check this if you want to instantly lockout login attempts with usernames which do not exist on your system”
…I’m able to lock out a lot of brute force attempts which is great.
Generally on some sites where I’ve built the theme I may not link to author pages so assume the username ids are quite well hidden and won’t be guessed BUT on a couple of sites (using third party theme) I’m getting a lot of brute force activity and I’m guessing because the theme links to the author page and in effect shows the username the above technique doesn’t work.
Apart from editing the themes, using the plugin any idea how I can instantly lockout access so there’s less stress on the server.
As much as I have all the default options enabled on login lockdown, for the sites where the username is known the server usage seems very high. I’d assume the lockouts that occur on incorrect passwords would work well but the CPU usage on the server still seems high.
I’m not sure we can use the cookie based protection, aware the clients running these sites may struggle with this option.
Aware I may be missing a trick or haven’t provided enough info but any assistance would be much appreciated. Big thanks in advance.
https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/
- The topic ‘Brute Force techniques’ is closed to new replies.
