Brute Force Attacks Against WordPress Sites

[chris]

Today there have been 53,932 attempts to login to the ​TTT web site on ParrotServer all from the same IP address:

grep POST /home/ttt/logs/access.log | grep wp-login.php | grep 217.174.240.254 | wc -l
53932

I noticed this due the higher than usual load it was generating.

Would it be OK to spend an hour or two installing the ​WP fail2ban plugin on all the sites on the server?

Some more background on this issue:

• ​https://docs.webarch.net/wiki/WordPress#Brute_Force_Attacks