Skip to main content

General

Anticipating for brute force

My FC website is experiencing a brute force attack. How can I address this? Fluent Auth may not handle it, or I might be overlooking something.

Thanks

  • 1 like
  • 3 comments

Mat ‎

Fadel RM you can try to use CloudFlare (Under Attack Mode, Rate Limiting, Geolocation) and/or hosting WAF (if applicable) and some Captcha/Turnstile + Limit the Number of (Failed) Login Attempts + 2FA (for Admin accounts)

Note: Limiting Login Attempts and 2FA is possible with FluentAuth

Fadel RM

I used those with Fluent Auth. I'll try CF, thanks!

Mat ‎

Fadel RM make sure you also block xmlrpc.php file (via WAF or .htaccess or FluentAuth or a code snippet) if you are not using it - in many cases it is not needed and it is used by bad actors.