Wordpress - Attack

[workshop]

My Wordpress login pages are being probed by a bot which is using multiple IP addresses to circumvent the Login Lock plug-in I use to keep the furry little creatures out. This literally results in thousands of Lock Out alerts. Is anyone else experiencing the same problem?

[Chrisjan B]

Not yet, fortunately....

Sent from my ASUS Transformer Pad TF300TG using Tapatalk 4 Beta

[workshop]

Anyone else using Log In lock and experiencing the same thing?

[Mitos]

Try WordPress Firewall 2 or wpOptimix

[workshop]

thx
will do

Log in Lock keeps them out
But the bot just switchs to a new IP
And the alerts flow like a burst pipe

[Wiz]

Change your Username if its ADMIN. Its a default hacking invitation.
Ensure you've installed Bulletproof security and scan a sucuri.net malware check just to be on safer side.
Have a strong password for your site.

Too stop and so called random attack for your site you can hide the structure of your WordPress. Google HIDE MY Word-press plugin (Paid) and you'll be able to get apart from those hackers.
It will hide all things which makes your site look its based on WordPress Platform.

WIZ

[workshop]

Google HIDE MY Word-press plugin (Paid) and you'll be able to get apart from those hackers.
It will hide all things which makes your site look its based on WordPress Platform.

WIZ

How does it work? How do the trolls ID the sites. Wordpress attracts both hack attacks and even more irritating are the spammers

[Dave A]

and even more irritating are the spammers

Have you tried Akismet?

[workshop]

Couldn't work without it. But they still come thick and fast.
When you get on the list there is only one thing to do and that is to close the Comments
And reopen them when you think no one is looking

[Dave A]

Maybe add the Stop Spammer Registrations plug-in too.
You might have to tweak the default settings some to reduce false positives:
1. A 10 day history is enough - I think it defaults to 30 days nowadays, which is pretty rough, especially given our SA shared IP situation.
2. I was getting too many false positives on the username check, so I give that one a skip as well.

[Wiz]

How does it work? How do the trolls ID the sites. Wordpress attracts both hack attacks and even more irritating are the spammers

It helps you to change the structure of your wordpress site completely. By default wordpress leave behind many footprints which hackers and spammers both use it.
Also You can use a plugin named http://sweetcaptcha.com/
A bot won't be able to do a spam comment as its a javascript based captcha plugin.

As on now plugins like Akismet etc won't help you much, spammers are smart and they use hell lot of IP's, comment's, domains you won't find it easy to track them.

Instead we can just make it hard for them to do it with a BOT.