[help] Someone is trying to break into my wp admin acc

CuriousMe :)

CuriousMe :)

BANNED
Joined
Jun 23, 2017
Messages
368
Reaction score
87
Someone is using bruteforce and has set up some type of bot. loginizer is showing 76 failed login attempts since august 9
the guy is using different ips and usernames which are pretty similar to mine.(I think he knows me)

what should i do?
 
Advertise on BHW
you didn't use firewall?
my server keep emailing me IP blocked after so many failed login, maybe already thousand.
 
You can install the recaptcha plugin for your blog, and then implement it on the login page. That way, even though if the password is guessed correctly, if the recaptcha isn't solved correctly, the hacker will still not be able to login. The recaptcha will also increase the cost to hack your site, as they will need to spend money on a captcha solving tool to continue their effort.
 
CuriousMe :) said:
Someone is using bruteforce and has set up some type of bot. loginizer is showing 76 failed login attempts since august 9
the guy is using different ips and usernames which are pretty similar to mine.(I think he knows me)

what should i do?
Click to expand...
Install and Activate Wordfence plugin
 
Are they trying from the same IP or using different ones. Have you reached out to your web host to see how they can help you out?
 
You should change your login link and auto block an IP that tries to access your wp-admin link
 
I always hide log in on all my sites, never had an issue yet.
 
You have to use wordfence or jetpack to protect against brute force attacks on wordpress.
This is a huge issue and there are many international botnets from hacked routers that just scrape wp sites and try passwords.
Most of these just look for fresh sites and use logins/pw's like temp or admin but some of them are more sophisticated.

In addition to wordfence, I use limited login (reloaded) plugin, which is an updated version of the old limited login.
I set it to auto block ip's after 1 failed attempt.

This fixed my problem pretty fast.

Good luck.
 
One of my favorite tips: create an "admin" user with the username of "admin" and a ridiculous password and set its level to "subscriber". I have so many people trying to break into all of my fake admin users, LOL.

After that, I install a captcha plugin. This is nice because it then costs the people money who want to try breaking into my site. So now, they're paying money to solve my captchas to crack the password for my fake admin.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top