Brute force attack

In a brute force attack, bots try to log in to the admin panel by entering an enormous number of passwords one after another. The weaker and shorter the password, the faster it falls. Common usernames (like "admin") make the job even easier.

The defence is simple and effective: long, unique passwords, two-factor authentication (2FA) and limiting the number of login attempts. Those three things alone stop the vast majority of such attacks.