reppie

Thanks, I’ll give it a go as well. But all of those URLs ‘should’ lead to a 404 error not a page where anyone can try logging in to something…

Yes, I understand all of that, hence the big long list of attacks that WF protects against.

What I’m asking is: my understanding of brute force attacks is that someone/a bot is trying to guess the password of something. But if they can’t access the log-in page or xml-rpc, how is this happening? There aren’t thousands of places to enter a password for WordPress.

Yes. My question is WHAT is being attacked.

As in, is there a soft target that these attacks are directed at so that I can do something to reduce them.

I thought brute force attacks were directed at log-in pages or xml-rpc.php. So I’ve installed Wordfence, and WPS Hide Login so that no-one knows the login URL and yet I am still getting 100s of brute force attacks blocked per week.

So how can I find out where these attacks are directed? What are they trying to brute force?

Lol, i’m not wrong just because you are anal. FAQs are for people with Qs. If people have no Qs because the description of a product appears to be exactly what they need, they don’t read the FAQs.

pro tip: the description tab which is much much more than 2 lines should really include pertinent information. people don’t read FAQs if they see no need to ask a question based on a completely inadequate description.

Well if nothing else, your excellent attitude will no doubt encourage many 10 out of 5 star reviews.

Wow, nice attitude Manuel.

Plug-in description = “When creating a new blog on WordPress Multisite, copies all the posts, settings and files, from a selected blog into the new one.” Perhaps you should look at altering this to be accurate, then you would find people weren’t disappointed when after installing they found they weren’t able to do what they wanted to.

If I have to rebuild the main site in to another site in order to clone it, then I will have done what I wanted a plug-in to do in the first place.