Help! someone is trying to hack me?!!

Ankith K Shetty

Regular Member

Apr 25, 2019

476

214

• Mar 31, 2020

• #1

Hi,

In my website, ithemes secure plugin is giving me alert that some one trying to login multiple times into my website. Find the screenshot below:
Is this plugin reliable?
How can I keep my website safe from further attack?

 

tints

Registered Member

Jan 2, 2013

97

28

• Mar 31, 2020

• #2

I'd think about getting a more secure password if you haven't do so already.

 

gdgtzz

Junior Member

Sep 12, 2011

178

74

• Mar 31, 2020

• #3

Ankith K Shetty said:

Hi,

In my website, ithemes secure plugin is giving me alert that some one trying to login multiple times into my website. Find the screenshot below:
Is this plugin reliable?
How can I keep my website safe from further attack?

Click to expand...

Look m8. All my popular websites have thousands of invalid logon attempts everyday. As long as they are attempts I'm cool.

A Tip is to change the login url tho

 

Leader777

Banned - Shitlisted and did not do the right thing

Feb 2, 2017

4,063

3,659

• Mar 31, 2020

• #4

There is always cockroaches trying to enter a room

 

itz_styx

Elite Member

Jr. Executive VIP

Jr. VIP

May 8, 2012

4,217

3,728

• Mar 31, 2020

• #5

its only automated scans probably, no need to worry if you have a good password.
however you should setup some blocking software.

 

E

eleven6

Regular Member

Jul 18, 2019

216

66

• Apr 1, 2020

• #6

Try securing your admin logins with two factor identification. Duo offers 1 free login per account. It's been working great for me. Try using the Wordfence plugin as well.

 

davids355

Super Moderator

Moderator

Executive VIP

Jr. VIP

Apr 25, 2011

19,849

28,315

• Apr 1, 2020

• #7

Not sure about the plugin you’re using, but wordfence has a feature when you can ban ips that try invalid usernames, you can also change the admin username then ban ips that try to log in using admin.

you can also set the invalid password lockout to 1 or 2 attempts and then lockout duration for 24 hours or something,

that will pretty much nullify the chance of a succession brute force attempt

aside from that, make sure you have strong passwords and keep your site up to date

 

Irelle

Junior Member

Mar 26, 2018

176

31

• Apr 1, 2020

• #8

First of all, change the login URL. Try WPS Hide Login and Shield for the 2FA.
If on your web ppl can register, expect fake emails and fake accounts (not confirmed through e-mail).

 

Ankith K Shetty

Regular Member

Apr 25, 2019

476

214

• Apr 1, 2020
• Thread Starter Thread Starter

• #9

gdgtzz said:

Look m8. All my popular websites have thousands of invalid logon attempts everyday. As long as they are attempts I'm cool.

A Tip is to change the login url tho

Click to expand...

thanks man. appreciate it.

 

Ankith K Shetty

Regular Member

Apr 25, 2019

476

214

• Apr 1, 2020
• Thread Starter Thread Starter

• #10

eleven6 said:

Try securing your admin logins with two factor identification. Duo offers 1 free login per account. It's been working great for me. Try using the Wordfence plugin as well.

Click to expand...

Thanks for the advice. Have done so

 

liyong601c

Supreme Member

Jr. VIP

Mar 30, 2010

1,279

415

• Apr 1, 2020

• #11

block their IP address

 

Stitches and Burns

Elite Member

Jul 24, 2014

1,517

1,605

• Apr 1, 2020

• #12

That's normal. There will always be brute force login attempts to any website. My site gets thousands of those everyday. Ninjafirewall has a captcha feature that blocks login attempts.