An Important Announcement From ASO - Blogging, Small Business, Web Design & Hosting Tips - A Small Orange

An Important Announcement From ASO


There is currently a brute-force login attack targeted at websites with
WordPress. Due to the nature of the attack, memory consumption on
targeted servers has increased. In some cases this has resulted in
degradation of performance, and unresponsive servers.


This is due to a high volume of http requests which can cause some servers to start
swapping memory to disk, and possibly run out of memory. The most impacted servers tend to be those with limited memory resources, including VPS instances, especially those with 1GB of RAM or less.


Our Ninjas have been hard at work restoring service to managed servers which have been affected by this issue, and have taken proactive steps to reduce the impact of this event.

Thanks for your patience, and please email help [at] asmallorange [dot][com] if you experience any issues.

  • To see if your site is being targeted, there’s a great Activity Monitor plugin.
    And if you are being targeted (you’ll see the failed login attempts), use the Limit Login Attempts plugin to prevent brute force attempts from gaining access to your site.

    • Rachel E.

      Holy crap — Kelli, I just added the two plugins you suggested, and I’m a little freaked out at how many tries it recorded in the first minute. Thank you so much for posting these.

    • James Pearson

      Hi Kelli,

      I thought I was noticing an increase in unresponsiveness and after installing the plugins you recommended I was shocked to see how many attempts were being made to gain access to the site.

      I’m noticing a big improvement since activating the ‘Limit Login Attempts’ plugin, so thank you very much for the recommendation.


  • David Bocardo

    Step #1 is usually deleting the original “admin” account, as most of brute-force attacks are targeted at that username… by doing this, you can also make sure you don’t get yourself locked out of your own wordpress site

  • Marcelo

    Hi there
    Thank you for sharing this information.
    I, like many others really appreciate what you are doing.
    All my websites have been down at different times during the day for the last 2 weeks. I have contacted support but we have not been able to find what’s causing the issue.
    Support asked me to upgrade the memory of my vps from 1gig to 1.5g and I did, but that still is not fixing the issue.
    My sites have very low traffic so I am not sure what to do next.
    Should I order more ram? Should i bump it to 3gigs? Is it possible to add 3gigs to 1 core?
    I need your help, these are all production sites and it is really hard to see this happening.
    Thank you

    • Marcelo, Thanks for writing. Your best bet would be to inquire with support at, and they can help you work through all of the above issues. Thanks for hosting with us!

      – Jim
      Community Ambassador
      A Small Orange

  • Marcelo

    Hi Jim
    Thanks for replying.
    I have already inquired a few times but no solution has been provided except add more ram. So I will keep adding ram 🙂


  • Pingback: An Important Announcement From ASO | Web Hosting Blog at ASO | The Humans' Resource()

  • – gmail correo

    What a stuff of un-ambiguity and preserveness of valuable knowledge on the topic
    of unexpected emotions.