Any WordPress site is potentially vulnerable to a brute force loginΒ attacks. Β Brute force login attacks occur when an attacker continually tries different username and password combinations from a pre-set list (think password1, password2, password3, etc.). Β The attacker will continue trying different login combinations until one works. Β Most brute force attempts are automated. Β There could be an entire botnet attempting to brute force login to your site.
WordPress itself has no built-in protections against brute force attacks into a WordPress admin area. Β A website could theoretically have brute force login attempts made against it for days. Β This dramatically slows down the responsiveness of a website and can lead to a poor user experience.
To help combat this, install the free WordPress plugin BruteProtect. Β BruteProtect installs in less than a minute and will protect your site from malicious login attempts. Β BruteProtect has been installed on over 100,000 different WordPress sites and continues to improve. Β Check out their site here:Β https://bruteprotect.com/.
