{"id":5158181,"date":"2014-08-04T15:35:51","date_gmt":"2014-08-04T15:35:51","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/brute-force-attacks-7\/"},"modified":"2016-08-21T23:54:30","modified_gmt":"2016-08-21T23:54:30","slug":"brute-force-attacks-7","status":"closed","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/brute-force-attacks-7\/","title":{"rendered":"Brute force attacks"},"content":{"rendered":"

Hello,<\/p>\n

I have a site that is running on Debian 7.<\/p>\n

Today fail2ban banned more than 500 IPs.
\nA few minutes ago my load average was in the sky.<\/p>\n

In the site I use WordFence so I block all the IPs that uses the login or lost password features more than 2 times.<\/p>\n

But today I got more than 10 login attempts per second whit rotation of of IPs (I don’t know how many computers they have but this is insane).<\/p>\n

Si thought…. I will add a “die;” at the beginning of the wp-login.php …. but the attempts where still there.<\/p>\n

A few minutes ago I got a DDoS and rebooting server or restarting the services they where still there.<\/p>\n

Now I added \u00e0 die in xmlrpc.php I will restart mysql et apache2 to see I this can solve my problem… but is there any way to prevent of fix this ???<\/p>\n

Any ideas ?<\/p>\n","protected":false},"template":"","class_list":["post-5158181","topic","type-topic","status-closed","hentry","topic-tag-xml-rpc"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/5158181","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/5158181\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=5158181"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}