Hack Attempt - How I Stopped a Brute Force Attack

A few days ago, someone tried to brute force attack my website but they were unsuccessful. In this video I am going to tell you exactly what this type of attack is and what I did to stop it.

[nihsumi]

Thanks for the info and solution! It was good to hear how you approached and solved the problem after creating your own login page.

[loreauvillephil]

I was having a lot of brute force attacks on my site a couple of months ago. And even though they never breached my account what happened was my server's resources were overloaded and my site was effectively "crashed" for about 10 - 15 minutes a few times each day. I did install Wordfence and it did help but what really made a difference was installing the CDN Cloudflare.

[ChatFoootballWithDez]

what about 2FA authentication for your admin panel?

[franzhuber]

In the free iTheme plugin this feature is already build in.

[stratos-tutorials]

Thanks for the video Alex.
I would like to point out some things about security. Most important is that this video is specific on brute force attack, and there are also other attacks, that recaptcha and changing the login page will not do any good. So about brute force attack,
1. You said that you cannot use the noCaptcha plugin, because you have a custom made page for login. Elementor gives you a re captcha to use, and every form now days do the same.
2. There is also a 3rd way to improve the login process, and that is the 2fa, witch wordfence supports it in the free version.
3. A major difference between adding a security field (recaptcha) and changing the login page, is the request the bot will do to the server. Every try to access the login page is a request, and every try to add a username and a password is a different request (that the server will respond with no recatcha error). This adds more load to the server and if it an attack from more than 1 bot, they can even overload the server and bring an access error.
4. Changing the login URL of the login page, may cause sometimes a conflict. It is not common, but there are some services, that try to add or access something from the wp-login. Again it is not very common but I have seen it happen in a website.
As for the question at the end, why people done it, there are many answers and the most common is money. Some attacks maybe for promotion, for redirection, for extracting user information and credit card details or for getting CPU resources to mine and other stuff.
Thanks again for the video.

[Dispatern]

I'm sorry you got attacked.
Thank you for the valuable info though on how to protect a wordpress website.

[DroDro]

What would have happened if you just ignored the problem? How bad would it be?