• Hi, I installed wp activity log and noticed everyday someone trying to login using a vpn but always failing.

    I blocked all countries ip except mine, then changed the login url but still seeing login attempt, how is this possible? Is there any other non-conventional way to login that I dont know?

    • This topic was modified 2 years, 4 months ago by Jan Dembowski. Reason: Moved to Fixing WordPress, this is not an Everything else WordPress topic
Viewing 4 replies - 1 through 4 (of 4 total)
  • Stef

    (@serafinnyc)

    This is just something that normally happens to every site in the world. Bots are constantly scanning and attempting to get into sites.

    Just keep things updated and don’t worry too much. If you want to lessen it a bit look at ways to block “bad bots” to your site.

    You also mentioned you’re blocking all countries except mine. So I’m assuming you’re hosted with Siteground and using their Country Block feature in the site tools under security is that correct?

    If so you could also reach out to support there for better ways to lessen the bots like this visiting.

    Thread Starter elfigos

    (@elfigos)

    Hey thank you for replying,

    I use a plugin that blocks all country ips except Italy, I tried with a vpn and it works
    but I dont understand how can bots access the admin login if login page is blocked besides it has a different url (different from /wp-login)

    Stef

    (@serafinnyc)

    Got it. Well, bots and their creators are very smart. They scan the site using every possible variable. You can block an IP but that really doesn’t prevent a bot from using a proxy and randomly changing its own IP.

    The best thing to do is to talk to your host about alternatives to using an app. Like using a firewall and also adding denials to your htaccess if available.

    It’s most likely they’re just trying to get in with random usernames and passcodes. So as long as your site is tighten up with apps and core. You should be in good shape.

    Thread Starter elfigos

    (@elfigos)

    alright thank you for the advice!

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Hacker keeps trying login admin’ is closed to new replies.