swon
Junior Member
- Oct 16, 2016
- 107
- 167
WP is up to date. seems like all the IP's are coming from Moscow and Moscow surrounding areas.
i changed the login page url to something completely random. not sure if that would make a difference.
seems like the attempts have ceased for now.
i changed the login page url to something completely random. not sure if that would make a difference.
seems like the attempts have ceased for now.
Wilson Grant Fisk
Elite Member
- Nov 10, 2012
- 15,677
- 46,847
Look at these, to restrict access to login and admin pages:
https://wordpress.org/plugins/tags/wp-login
https://wordpress.org/plugins/tags/wp-admin
Have used these in the past:
https://wordpress.org/plugins/rename-wp-login/
https://wordpress.org/plugins/stealth-login-page/
https://wordpress.org/plugins/login-lockdown/
https://wordpress.org/plugins/limit-login-attempts/
https://wordpress.org/plugins/tags/wp-login
https://wordpress.org/plugins/tags/wp-admin
Have used these in the past:
https://wordpress.org/plugins/rename-wp-login/
https://wordpress.org/plugins/stealth-login-page/
https://wordpress.org/plugins/login-lockdown/
https://wordpress.org/plugins/limit-login-attempts/
B
Banned member 185991
Guest
Do this on your wp-admin directory
http://stackoverflow.com/questions/4400154/deny-all-allow-only-one-ip-through-htaccess
http://stackoverflow.com/questions/4400154/deny-all-allow-only-one-ip-through-htaccess
Wilson Grant Fisk
Elite Member
- Nov 10, 2012
- 15,677
- 46,847
Also as it looks like an automated attack you could also add CloudFlare
The free account should do
https://www.cloudflare.com/plans/
The free account should do
https://www.cloudflare.com/plans/
Alchemizt
Regular Member
- Aug 25, 2016
- 222
- 217
I had Russians hammering a handful of my sites for a month before they gave up trying to bruteforce my passwords. I rarely check on some of these sites is why it went on for so long but my passwords are all 20+ character random alphanumeric and I use 2 factor on all my WordPress sites so needless to say they gave up eventually.
Strong passwords, 2 factor and keeping everything updated is your best defense. At the end of the day though a true hacker will get in if they want to bad enough.
Strong passwords, 2 factor and keeping everything updated is your best defense. At the end of the day though a true hacker will get in if they want to bad enough.
mayouf med
Newbie
- Dec 24, 2016
- 32
- 4
why 3rd world countries !!
pewep
Power Member
- Nov 3, 2008
- 705
- 3,293
They don't convert at all and are more likely to be infected. Why even take the risk?
swon
Junior Member
- Oct 16, 2016
- 107
- 167
how do i block ips by country?
pewep
Power Member
- Nov 3, 2008
- 705
- 3,293
There are a bunch of ways. You can do it by htaccess (a pain), scripts or with wp plugins like Geoblock, etc....
swon
Junior Member
- Oct 16, 2016
- 107
- 167
Thank for the input everyone... I added Stealth Login Page.
basically you will login with username, password, and an additional code.
incorrect login will redirect to a URL of your choice.
if anyone is wondering where the url is redirecting to, its to this gif:
basically you will login with username, password, and an additional code.
incorrect login will redirect to a URL of your choice.
if anyone is wondering where the url is redirecting to, its to this gif:
pewep
Power Member
- Nov 3, 2008
- 705
- 3,293
Lol, you should have redirected them to cia.gov or interpol or a very suspicious auto-download .exe
Wilson Grant Fisk
Elite Member
- Nov 10, 2012
- 15,677
- 46,847
Yeah I usually redirect people to fbi.gov
DunDidIt2X
Elite Member
- Mar 22, 2012
- 2,863
- 2,432
And use wordfence, with their firewall, and cloudflare to, you should be alright after using these.
