Last week in the he implored Americans to move beyond simple passwords and to enable two factor authentication. One of the things we monitor at Wordfence is the number of brute force attacks on WordPress websites. Brute force attacks are password guessing attacks, where an attacker tries to sign in as you by guessing your password. To give you an idea of the level of attacks in the wild, we gathered data on brute force attacks across the sites we protect within a 16 hour Window starting Sunday until Monday (yesterday) at 2pm Pacific time. Here are the highlights. Remember, this is only over a 16 hour window which is relatively short.

During this time we saw a total of 6,611,909 attacks targeting 72,532 individual websites. We saw attacks during this time from 8,941 unique IP addresses and the average number of attacks per victim website was 6.26. The total number of attacking IP’s was actually 55,391 but we only counted IP’s that generated more than 10 failed logins across all sites. That way we excluded accidental login failures.

Firstly, ignore the distinction between V6 and V8. They're both just two different basic layouts for a piston engine, of which there are a huge number. From the point of view of the driver, 6 or 8 cylinders really doesn't matter.

So where are these attacks coming from. The results are not what you would expect. The table below shows the total number of attacks (brute force login attempts in this case) ordered by country. Brute Force Attacks by Country. The Ukraine is the top offender, but there is a specific reason for this which we explain below. The United States is second. Our hypothesis is that this is where most data centers are based and therefore most compromised sites, from which attacks are launched, will be based in the USA.

You’ll notice that the Ukraine is at the top of the list. Over 86% of those attacks come from just two IP addresses at a Ukrainian hosting provider. These two IP’s generated 2.4 Million attacks between the two of them. During just 16 hours, they targeted 37,454 unique victims. The two attackers that we analyzed are based at a Ukrainian hosting provider. El capitan boot screen compatible video cards for mac pro 31. They caused their Ukrainian hosting provider to account for more attacks than the next 19 hosting providers, combined.

We currently aggregate attack information at a rate of 114 attacks per second. Analyzing data like this at Wordfence helps us understand the changing attack landscape and how to better protect our customers. What can you do to protect yourself? Firstly, make sure you’re running the free or premium version of Wordfence and that you have the enabled. It is enabled out of the box in Wordfence.

With this feature enabled, if you get a failed login from an IP address, Wordfence will contact our cloud services to find out if that IP is one of the attackers we know about (like the two above). If it is, it will immediately be blocked from signing in, protecting your site from a brute force attack. The attacker won’t even get the standard 3 or 5 tries before they are locked out. Wordfence also provides out of the box in the free and premium versions.