Brute Force Login Attack on WordPress: Case Study

Strong, WordPress is, otherwise it would have been breached long ago. These three attackers did a brute force login attack on me today. This is not the first and will certainly not be the last. While I can track down the IP and ISP, and ban them, their origins I will never know. This is the murky world of the internet, and it is worldwide.

41.76.123.243: 41.76.123.0 – 41.76.123.255 WIFLY GA GABON has tried security hacks on my site before, 6 attempts
171.25.194.89 mes.megion.ru 171.25.194.0 – 171.25.195.255 Lider Telecom Ru, 52 attempts
117.255.233.117 117.255.224.0 – 117.255.255.255 Wimax New Delhi IN, 8 attempts
117.253.234.15

Three hackers, one from Africa, one from Russia, one from India. This is the global entity called the Internet.

Request: POST /wp/wp-login.php HTTP/1.0
Referrer: none
User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:40.0) Gecko/20100101 Firefox/40.0

117.253.234.15	[14/Dec/2016:21:58:39	POST /wp/wp-login.php HTTP/1.0	301	-
117.255.233.117	[14/Dec/2016:22:00:04	POST /wp/wp-login.php HTTP/1.0	200	3478
117.255.233.117	[14/Dec/2016:22:00:08	POST /wp/wp-login.php HTTP/1.0	200	3478
117.255.233.117	[14/Dec/2016:22:00:13	POST /wp/wp-login.php HTTP/1.0	200	3478
117.255.233.117	[14/Dec/2016:22:00:19	POST /wp/wp-login.php HTTP/1.0	200	3478
117.255.233.117	[14/Dec/2016:22:00:24	POST /wp/wp-login.php HTTP/1.0	200	3478
117.255.233.117	[14/Dec/2016:22:00:34	POST /wp/wp-login.php HTTP/1.0	200	3478
117.255.233.117	[14/Dec/2016:22:00:38	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:58:45	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:58:46	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:58:48	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:58:49	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:58:51	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:58:52	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:58:54	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:58:55	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:58:57	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:58:58	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:00	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:01	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:03	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:04	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:06	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:07	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:09	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:11	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:12	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:13	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:15	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:16	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:18	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:19	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:21	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:22	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:24	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:26	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:27	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:29	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:30	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:32	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:33	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:35	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:36	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:38	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:39	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:41	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:42	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:44	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:45	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:47	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:49	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:50	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:52	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:53	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:55	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:56	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:57	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:21:59:59	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:22:00:00	POST /wp/wp-login.php HTTP/1.0	200	3478
171.25.194.89	[14/Dec/2016:22:00:02	POST /wp/wp-login.php HTTP/1.0	404	-
41.76.123.243	[14/Dec/2016:21:57:33	POST /wp/wp-login.php HTTP/1.0	200	3430
41.76.123.243	[14/Dec/2016:21:57:38	POST /wp/wp-login.php HTTP/1.0	200	3430
41.76.123.243	[14/Dec/2016:21:57:45	POST /wp/wp-login.php HTTP/1.0	200	3430
41.76.123.243	[14/Dec/2016:21:57:54	POST /wp/wp-login.php HTTP/1.0	200	3430
41.76.123.243	[14/Dec/2016:21:58:00	POST /wp/wp-login.php HTTP/1.0	200	3430
41.76.123.243	[14/Dec/2016:21:58:06	POST /wp/wp-login.php HTTP/1.0	200	3430

Related posts:

Leave a Reply