{"id":302,"date":"2015-07-02T09:58:31","date_gmt":"2015-07-02T09:58:31","guid":{"rendered":"https:\/\/www.fastcomet.com\/blog\/?p=302"},"modified":"2022-06-10T07:28:01","modified_gmt":"2022-06-10T07:28:01","slug":"wordpress-bruteforce-protection-improved","status":"publish","type":"post","link":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved","title":{"rendered":"WordPress Bruteforce Protection Improved"},"content":{"rendered":"\n

Every day our security experts are looking to improve the security and respectively the performance of our services even more so our customers’ websites can be better secured and loading even faster. With the latest improvements of our Shared Hosting packages<\/a>, we are targeting one of the most abused WordPress vulnerabilities<\/a> of all times.<\/p>\n\n\n\n\n\n\n\n

Synopsis<\/h2>\n\n\n\n

When you install WordPress by default the application does not have any brute-force protection activated and it is basically allowing anyone to perform as much as failed login attempts he\/she wants on the wp-login.php page. By definition, a brute force attack<\/a> is a type of web application attack which aims to gain access to the targeted website by submitting a large number of login attempts to the login form for the admin interface of the website. The actual password being used does not matter and the attacker can either generate the passwords randomly or those can be also part of some dictionary also known as a dictionary attack<\/a>.<\/p>\n\n\n\n

Bruteforce Protection Over the Years<\/h2>\n\n\n\n

In the time we were developing multiple brute-force protection solutions, however neither one of those was giving good results as all of them were blocking the bad traffic to your wp-login.php page but were not terminating the connections and basically, your WordPress website was protected at the cost of server resources as the connections were persisting. This was causing a negative impact on the performance of your websites and since we are focused on providing our customers with outstanding loading speed we develop a new and innovating approach of mitigating these attacks.<\/p>\n\n\n\n

FastComet BruteForce protector<\/h2>\n\n\n\n

The new and improved WordPress Bruteforce protector resolves all the issues and says “NO” once and for all to the brute-force attempts on your website without actually impacting the performance of the server. How exactly this is happening – it pretty simple. In close collaboration with the developers of our Firewall software, we have developed an automatic IP blockage for all those IP addresses trying to brute-force your website so your WordPress website can be accessed only by legitimate users and respectively it can be protected from all those hacking attempts.<\/p>\n\n\n\n

Conclusion<\/h2>\n\n\n\n

In the past we have released our Security Improvements Tutorial<\/a> where we have explained how you can secure even further your WordPress based website, however sometimes not all of the users are comfortable of securing their websites following this tutorial mostly due to the fact that many people(website admins, blog posts writers, editors, etc.) are accessing their admin areas. So we developed a universal solution which will basically filter the bad traffic to the wp-login.php location and allow only the legitimate users to access the admin area of WordPress. This security improvement is already available on our Shared Hosting Packages<\/a>, our WordPress VPS<\/a> packages and of course our WordPress Dedicated Servers<\/a> packages.<\/p>\n","protected":false},"excerpt":{"rendered":"

Every day our security experts are looking to improve the security and respectively the performance of our services even more so our customers’ websites can be better secured and loading even faster. With the latest improvements of our Shared Hosting packages, we are targeting one of the most abused WordPress vulnerabilities of all times.<\/p>\n","protected":false},"author":5,"featured_media":614,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[140,4726,256],"tags":[100,9,44],"class_list":["post-302","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-service-updates","category-wordpress","tag-bruteforce","tag-security","tag-wordpress"],"featured_image_src":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2015\/07\/wp-login.jpg","author_info":{"display_name":"Christopher","author_link":"https:\/\/www.fastcomet.com\/blog\/author\/christopher"},"yoast_head":"\nWordPress Bruteforce Protection Improved | FastComet<\/title>\n<meta name=\"description\" content=\"Learn how to improve the security of your WordPress website with the new \u261b FastComet \u261a BruteForce protector available for all hosting plans.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"WordPress Bruteforce Protection Improved | FastComet\" \/>\n<meta property=\"og:description\" content=\"Learn how to improve the security of your WordPress website with the new \u261b FastComet \u261a BruteForce protector available for all hosting plans.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved\" \/>\n<meta property=\"og:site_name\" content=\"FastComet Blog\" \/>\n<meta property=\"article:published_time\" content=\"2015-07-02T09:58:31+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-06-10T07:28:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2015\/07\/wp-login.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"680\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Christopher\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"WordPress Bruteforce Protection Improved | FastComet","description":"Learn how to improve the security of your WordPress website with the new \u261b FastComet \u261a BruteForce protector available for all hosting plans.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved","og_locale":"en_US","og_type":"article","og_title":"WordPress Bruteforce Protection Improved | FastComet","og_description":"Learn how to improve the security of your WordPress website with the new \u261b FastComet \u261a BruteForce protector available for all hosting plans.","og_url":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved","og_site_name":"FastComet Blog","article_published_time":"2015-07-02T09:58:31+00:00","article_modified_time":"2022-06-10T07:28:01+00:00","og_image":[{"width":1024,"height":680,"url":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2015\/07\/wp-login.jpg","type":"image\/jpeg"}],"author":"Christopher","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Christopher","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved#article","isPartOf":{"@id":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved"},"author":{"name":"Christopher","@id":"https:\/\/www.fastcomet.com\/blog\/#\/schema\/person\/e70bae8b5451b247e36928e336317827"},"headline":"WordPress Bruteforce Protection Improved","datePublished":"2015-07-02T09:58:31+00:00","dateModified":"2022-06-10T07:28:01+00:00","mainEntityOfPage":{"@id":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved"},"wordCount":476,"commentCount":2,"image":{"@id":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved#primaryimage"},"thumbnailUrl":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2015\/07\/wp-login.jpg","keywords":["bruteforce","security","wordpress"],"articleSection":["Security","Service Updates","WordPress"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved","url":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved","name":"WordPress Bruteforce Protection Improved | FastComet","isPartOf":{"@id":"https:\/\/www.fastcomet.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved#primaryimage"},"image":{"@id":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved#primaryimage"},"thumbnailUrl":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2015\/07\/wp-login.jpg","datePublished":"2015-07-02T09:58:31+00:00","dateModified":"2022-06-10T07:28:01+00:00","author":{"@id":"https:\/\/www.fastcomet.com\/blog\/#\/schema\/person\/e70bae8b5451b247e36928e336317827"},"description":"Learn how to improve the security of your WordPress website with the new \u261b FastComet \u261a BruteForce protector available for all hosting plans.","breadcrumb":{"@id":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved#primaryimage","url":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2015\/07\/wp-login.jpg","contentUrl":"https:\/\/www.fastcomet.com\/blog\/wp-content\/uploads\/2015\/07\/wp-login.jpg","width":1024,"height":680},{"@type":"BreadcrumbList","@id":"https:\/\/www.fastcomet.com\/blog\/wordpress-bruteforce-protection-improved#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fastcomet.com\/blog"},{"@type":"ListItem","position":2,"name":"WordPress Bruteforce Protection Improved"}]},{"@type":"WebSite","@id":"https:\/\/www.fastcomet.com\/blog\/#website","url":"https:\/\/www.fastcomet.com\/blog\/","name":"FastComet Blog","description":"FastComet Web Hosting Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fastcomet.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.fastcomet.com\/blog\/#\/schema\/person\/e70bae8b5451b247e36928e336317827","name":"Christopher","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fastcomet.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/99f135e26f1ad748551251c1956e4aae0bd3bcc11af8e071075359b134894941?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/99f135e26f1ad748551251c1956e4aae0bd3bcc11af8e071075359b134894941?s=96&d=mm&r=g","caption":"Christopher"},"description":"Christopher has many years of experience leading teams in the fields of Technical support, Server Administration, and Product Development. He mainly works on the backend, helping to create the infrastructure that powers FastComet. He is responsible for flawless migrations and quick and efficient answers to client questions. He also monitors our network status and jumps in to solve time-sensitive issues like DDoS attacks and stops malicious attempts in their tracks. Christopher\u2019s primarily responsible for making sure that our servers purr along, and has worked tirelessly to improve automation at FastComet.","sameAs":["https:\/\/www.fastcomet.com"],"url":"https:\/\/www.fastcomet.com\/blog\/author\/christopher"}]}},"_links":{"self":[{"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/posts\/302","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/comments?post=302"}],"version-history":[{"count":6,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/posts\/302\/revisions"}],"predecessor-version":[{"id":3550,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/posts\/302\/revisions\/3550"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/media\/614"}],"wp:attachment":[{"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/media?parent=302"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/categories?post=302"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fastcomet.com\/blog\/wp-json\/wp\/v2\/tags?post=302"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}