Blogspot Robot

I’m having the same problem. Started today.

I think I fixed it. I did this:

I  think the hackers are using this URL to register:

https://marijuanahandlers.com/wp-login.php?action=register

So I added a Redirect plugin.

Replace my URL with yours

Plugin: https://redirection.me/

Our website already redirects the login page to the home page. We use another login page. Maybe some plugin is registering the user.

You are right! The page visited is /wp-login.php?action=register. I don’t know how it was registering, I tested it and it was redirecting. I blocked the IP.

Hi @gmcoleman,

There are a couple of things you can try to stem the flow of spam registrations. I have seen rogue users potentially trying to come through XML-RPC, which can be disabled. “Disable XML-RPC authentication” appears in Wordfence > Login Security > Settings. You can also block this route entirely using .htaccess, provided you don’t use the WordPress app or a plugin that requires it such as Jetpack:

# Block WordPress xmlrpc.php requests
<Files xmlrpc.php>
order deny,allow
deny from all
</Files>

You could also enable reCAPTCHA for registration/logins using our Login Security module to ensure humans are able to complete the form, but it should be effective at blocking automatic bot registrations.

Thanks,
Peter.