There's something (a botnet?) that is apparently attacking my Wordpress site. I see lots of entries like this in the Apache access logs, several per second:
18.104.22.168 - - [14/Apr/2013:22:57:18 -0400] "POST /blog//wp-login.php HTTP/1.1" 200 4115 "-" "Mozilla/5.0 (X11; U; Linux i686; pt-BR; rv:22.214.171.124) Gecko/20091028 15 Ubuntu/9.04 (jaunty) Firefox/3.0.15" 126.96.36.199 - - [14/Apr/2013:22:57:19 -0400] "POST /wp-cron.php?doing_wp_cron=1365994639.0381069183349609375000 HTTP/1.0" 200 222 "-" "WordPress/3.5.1; http://mysite.com"
I am thinking that something is trying to brute-force guess passwords.
One idea I had would be to block all requests to wp-login.php, except for my home IP address. How would I accomplish this?
Or is there a Wordpress plugin that will block these brute-force attacks automatically?
Or is there a better idea?
I'm running Apache 2.2.22 on Ubuntu 12.04.