How to ban an IP address to your WordPress blog?


This article follows a comment asking if an IP address that visits almost 600 times in the wp-login.php (which is theban an IP address to your WordPress blog login page of the Administration) of her blog was well a hacking attempt.
It was a brute-force attack of finding a password by trying all possible combinations. When the password is relatively complex, there is virtually no chance to penetrate it, whereas if it consists of little letters, the risks increase dramatically.

Here are two very simple but daunting methods those will protect your blog from an attack of this type without any problems.

Ban the IP, if you are able to know and to see a live IP attacks you, you can banish and prevent access to your blog by this code to .htaccess file at the root your server:


 

order allow,deny
deny from 180.0.0.1
deny from 180.0.0.2
deny from 180.0.0.3
allow from all

Where are the 180.0.0.1/2/3 IP  to be banned. This solution is very effective at the moment but still temporary since hackers often have different IP addresses.

The WordPress Limit Login Attempts which blocks X minutes for a person who was mistaken the password for X time when attempting to access the blog administration. After X crashes, this person will be blocked again for X hours. The Administrator may also be notified by email of the hacking attempt.

Signature


0saves
If you enjoyed this post, please consider leaving a comment or subscribing to the RSS feed to have future articles delivered to your feed reader.
About Abhishek

Abhishek Ghosh is an Orthopedic Surgeon, Inventor with 216 Patents, Current editor of The Customize Windows Media Group. You can follow and know more about Dr. +Abhishek Ghosh on Google Plus and follow on Twitter as @AbhishekCTRL.

Speak Your Mind

*