Trusted Design

Ukrainian ISP Behind Over 1.65Mil Daily Brute-Force Attacks on WordPress Sites

概要

Over the past three weeks, the number of brute-force attacks against WordPress sites has almost doubled, according to WordPress security firm WordFence. The company says it recorded a sharp increase in the number of daily attacks and daily IPs involved in brute-force requests following November 24. Brute-force attacks are attempts to guess a websites admin (or any user's) credentials by launching repeated authentication requests at small intervals. These attacks usually come at short time intervals, and web firewalls can detect and block them. True brute-force attacks usually involve billions of authentication attempts, as the attacker goes through all the password variations. The incidents WordFence is reporting are most likely dictionary attacks, where an attacker uses a small list of potential passwords, such as "123456" and others.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Wordpress Brute Force Login Attacks: 10/04/15-10/12/15 (score: 0.68)
• Probing for Wordpress installations & other web vulnerabilities (score: 0.67)
• Wordpress Brute Force (score: 0.60)
• Compromised WordPress sites redirect visitors to Nuclear EK (score: 0.59)
• WordPress Compromise Campaign (score: 0.55)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る