id,summary,reporter,owner,description,type,status,priority,milestone,component,resolution,keywords,cc,estimatedhours,hours,billable,totalhours 871,Brute Force Attacks Against WordPress Sites,chris,chris,"Today there have been 53,932 attempts to login to the [http://www.transitiontowntotnes.org/ TTT web site] on [[ParrotServer]] all from the same IP address: {{{ grep POST /home/ttt/logs/access.log | grep wp-login.php | grep 217.174.240.254 | wc -l 53932 }}} I noticed this due the higher than usual load it was generating. Would it be OK to spend an hour or two installing the [https://wordpress.org/plugins/wp-fail2ban/ WP fail2ban] plugin on all the sites on the server? Some more background on this issue: * https://docs.webarch.net/wiki/WordPress#Brute_Force_Attacks",maintenance,new,major,Maintenance,Parrot server,,,ade sam,0.0,0,1,0.25