My wordpress site is under brute force attack

You can use the BBQ Pro firewall to stop server using resources to if they gonne directly to the IP, Jeff who built it is an old veteran on WordPress security, also written some nice books on the subject.
Yes if they are accessing the server directly by whatever means, SSH, sql, mail server, phpmyadmin, any hosting dashboard, any number of ports, there are many solutions. CSF firewall, ip tables, fail 2 ban are a few good ones. I’ve had good success with fail 2 ban and CSF working together in the past.
 
Yes your server can be targeted several ways without connecting to a web application firewall. As a webmaster you need to learn how to read your server logs to see what is being accessed and by who or what so that you can effectively mitigate any threat.

cloudflare will only help you with web applications
I just nuked mysql databse and fail connection of server still occur...
So now it should be confirmed brute-force attack?
 
I just nuked mysql databse and fail connection of server still occur...
So now it should be confirmed brute-force attack?
Can you be more specific about what you mean by nuked? If wordpress can’t connect to the database that error happens. So if you deleted the database then yes that error will happen.

Or are you saying you cannot connect to the server? By what? Web browser, SSH?
 
Can you be more specific about what you mean by nuked? If wordpress can’t connect to the database that error happens. So if you deleted the database then yes that error will happen.
I uninstalled the wordpress and deleted the database which linked to the wordpress. Then I installed wordpress again, it auomatically generate a database and link to it. the new wordpress runs smoothly for around 10 mins and fail database connection occurs
 
I uninstalled the wordpress and deleted the database which linked to the wordpress. Then I installed wordpress again, it auomatically generate a database and link to it. the new wordpress runs smoothly for around 10 mins and fail database connection occurs
It sounds like you’re running out of memory. Do you have access to SSH?
 
I
Have you checked resource usage?
Dont really know how to check but I am now pretty sure it is not a brute force attack.
My site run smoothly without any plugin, once I install the custom template it got connection error within 5 mins.
The weird thing is that same custom template runs perfectly in my shared hosting server.
 
Error establishing database connection comes from a lack of resources such as memory, or disk space. Or if the credentials in wp-config.php are incorrect.

My bet without knowing more information is that you are running out of disk space or ram. Or both.
 
I

Dont really know how to check but I am now pretty sure it is not a brute force attack.
My site run smoothly without any plugin, once I install the custom template it got connection error within 5 mins.
The weird thing is that same custom template runs perfectly in my shared hosting server.
I bet its a server configuration issue...
 
Back
Top