https://mamchenkov.net/wordpress/2013/04/14/wordpress-passwords-and-brute-force/