[URGENT] Someone is trying to HACK my WP site

[newon]

Since last few hours someone is trying hack my WP site. In last 4 hours more than 500 attemps on my login page.
>> I changed password to more harder one
>> I keep blocking IPs .... but he's changing IP frequently
>> I've added IP block for more than 5 missed attempts.

What more should I do... please please please help... It's URGENT

 

[blogzandstuff]

You could try this https://wordpress.org/plugins/wp-limit-login-attempts/

 

[newon]

You could try this https://wordpress.org/plugins/wp-limit-login-attempts/

I've already set IP block on maximum 5 attemps.

 

[newon]

Now the attack is SEVERE... 1 attempt in every 10 secs.
My God, can't understand what to do

 

[blogzandstuff]

I always do 1 and from my isp only, nothing more to do

 

[sergenthw]

Dont be a child. I hate child
You dont even have to worry if he is attempting brute force
If you set password like 3jf2#jw$!33j9a there's zero chance he brute force that
I doubt this but If he is trying some unsual way than just backup your web and close site for few days
Or you could just buy Wpfence country block module and block the country

 

[Tzbb]

Change the admin username also.

 

[GhostVision]

If you have a strong password... relax

 

[jamulair]

change it to something like fjio9234uf984fj981jthtn(*)E&W(*TRF&(WESH then youll be fine lmao there is no way he can get in with something like that

 

[newon]

Dont be a child. I hate child
You dont even have to worry if he is attempting brute force
If you set password like 3jf2#jw$!33j9a there's zero chance he brute force that
I doubt this but If he is trying some unsual way than just backup your web and close site for few days
Or you could just buy Wpfence country block module and block the country

Those give some relaxation... Have a harder PW now (like you showed), WPFence installed, Backing up all data now.

 

[Bigstar20]

As someone else mentioned, change the USERNAME, then in wpfence select the option that blocks anyone entering the wrong username - they will normally try to use the word "admin".

 

[linuxmansf]

don't worry. it seems just a try by a kid

 

[Nut-Nights]

OP your age please ?

 

[AckAck]

like others said generate a long character password and install IP Geo Block.

also play with your htacess file
https://codex.wordpress.org/Brute_Force_Attacks

 

[GhostVision]

As someone else mentioned, change the USERNAME, then in wpfence select the option that blocks anyone entering the wrong username - they will normally try to use the word "admin".

Username change not help is a trick to find de admin username.. only a good password is safe

 

[Jurr]

Are you, by any chance, using Cloudflare on your site? If you are, then there is an excellent solution to this problem.

 

[shanna_doll]

Delete wp login page from the server

 

[ePrime]

Just change the admin directory name from wp_admin to something else (you'll also have to update the config file AFAIK)
And, password protect that directory from your cPanel.

 

[eaglesWTF]

I dont know if someone mentioned this already but you can :
1) Change your WP-admin page address - by default it is http://xxx.com/wp-admin - and you can change it to xxx.com/donaldtrumpneverwins
And I can bet that no one will find this "login" page to massively attack with logins.
2) Its called CLEF - just google for "get clef" - its 2 steps verification with your phone using your phone camera and barcodes - so in this case you can be much more safe and none of Pakistani haxors will take down your site.

 

[iwebsocial]

Hackers are everywhere in online world. You must have to take some precautions and preventive steps to make sure that your site is safe from hackers. Always use a security plugin for your blog. Change your admin username and change your passwords frequently. Change the prefix of the database table where your WordPress site is install. Use captcha on your site registration and login pages.