Users are still trying to login after change wp-admin

Those are most likely spam bots trying to access wp-admin — which presumably is the reason you’ve changed the login URL in the first place? It seems the plugin is working as it should.

@jamieschmid Seems, bots are still trying to access wp-admin even after changing the wp-admin to another custom link.

Are they going directly to the new url as well?

Please note, changing the URL doesn’t necessarily afford you better security. But this has happened to me before with xml-rpc, a big botnet attack can cripple your server. If you’re only getting a few notifications, that’s not a big deal. I think you can turn those notifications off if you’re sick of getting them.

HOWEVER, if it’s really bad and is affecting your server, get Cloudflare as it’s more powerful than Wordfence for brute force attacks.

There is a nuclear option too – you can block all IP access to the URL and whitelist only your IP (as long as it is static). I believe the free version of Wordfence lets you do this but check to confirm.

• This reply was modified 3 years, 10 months ago by jamieschmid. Reason: didn't notice he already had WF