My, WordPress has gotten popular this week…
As some of you know, on Thursday our hosting server was attacked. This was part of a global coordinated effort to brute force attack WordPress sites. It kept us busy throughout the day and into the evening Thursday, but we were able to get everything under control for now. Some have asked if this was preventable, and what should be done to assure this doesn’t happen again.
Best thing we can do is simply to be prepared. I’m sure this will not be the last time this happens. We are in the process of making a specific plan for our WordPress sites, including updating software, adding caching plug-ins, and adding extra security to the sites. These items will be rolled out in stages over the next few months.
In the meantime, here are a couple of articles that discuss the attack in depth, and what can be done in general to help prepare for the next one.
Massive botnet using brute force attack to target WordPress sites | The Verge
WordPress Brute Force Attacks, and What You Need to Do About it
Comments are closed.