[wp-hackers] Limit Login Attempts

[Dino Termini]

That's exactly what I do in my case. I actually wrote a plugin that puts 
'offending' IPs in that blacklist automatically ;)

On 4/16/2013 11:46 AM, Michael Donaghy wrote:
> If anyone else is interested, this is what I'm doing to whitelist IPs in
> apache.  The first allow is an example of an IP, and the second is higher
> up in the IP block - this is useful for clients who's last number
> frequently changes.
>
> file: pre_virtualhost_global.conf
>
> <Files wp-login.php>
> order deny,allow
> deny from all
> allow from 11.22.33.44
> allow from 11.22.33
> </Files>
> <Location /wp-admin/>
> order deny,allow
> deny from all
> allow from 11.22.33.44
> allow from 11.22.33
> </Location>
>