16 Failed Login Attempts (4 lockouts(s))

Discussion in 'WordPress' started by gkd_uk, Oct 11, 2013.

0
  1. #1
    Someone has been trying to hack into one of my word press powered blogs. Received a notification via one of the new security plugins I have enabled.

    16 Failed Login Attempts (4 lockouts(s)) from ip: 31.186.100.200
    Last user attempt: admin
    IP was blocked for 24 hours
    10 lockouts since last reset
    1 IP is currently blocked from trying to log in

    176.42.242.97 admin (1 lockout)
    91.93.14.73 admin (1 lockout)
    188.143.232.45 admin (1 lockout)
    37.115.185.67 admin (2 lockouts)
    142.4.212.172 admin (1 lockout)
    31.186.100.200 admin (4 lockouts)


    These guys will never give up. Secure your sites and keep them up to date to reduce such attacks.

    A few tips: https://forums.digitalpoint.com/threads/securing-wordpress.2685438/
     
    Last edited: Oct 11, 2013
    gkd_uk, Oct 11, 2013 IP
  2. themes4all

    themes4all Well-Known Member

    Messages:
    662
    Likes Received:
    47
    Best Answers:
    6
    Trophy Points:
    100
    #2
    hello there,

    install wp better security plugin, make the necessary changes...etc it seems like it's a Brute Force attack.. so you have to change the Admin username and ID... plus add some complexed passwords for you and your users...

    Goodluck
     
    themes4all, Oct 12, 2013 IP
    matt_62 likes this.
  3. matt_62

    matt_62 Prominent Member

    Messages:
    1,827
    Likes Received:
    515
    Best Answers:
    14
    Trophy Points:
    350
    #3
    wordfence has a built in firewall, and I definitely agree with themes4all. As soon as you install wp better security, they will demand that you change from using admin to another username.
    Mind you, doesnt hurt to keep doing regular backups of your site just in case.
     
    matt_62, Oct 12, 2013 IP
    themes4all likes this.
  4. gkd_uk

    gkd_uk Well-Known Member

    Messages:
    979
    Likes Received:
    74
    Best Answers:
    1
    Trophy Points:
    165
    #4
    Hi

    I changed my username a long time ago and have the security plugins installed.

    This was more of a warning to the rest :)
     
    gkd_uk, Oct 14, 2013 IP
  5. blogdum

    blogdum Well-Known Member

    Messages:
    538
    Likes Received:
    26
    Best Answers:
    0
    Trophy Points:
    100
    #5
    wp better security and wordfence both are good. You can also try Limit Login Attempts WordPress Plugin
     
    blogdum, Oct 16, 2013 IP
  6. Halil D.

    Halil D. Member

    Messages:
    34
    Likes Received:
    5
    Best Answers:
    0
    Trophy Points:
    48
    #6
    Hi,
    I use below plugins and all Brute Force attack was stoped,
    http://wordpress.org/plugins/rename-wp-login/
    http://wordpress.org/plugins/admin-renamer-extended/
    http://wordpress.org/plugins/bruteprotect/

    hope all those will help you
     
    Halil D., Nov 1, 2013 IP
  7. domainvale.com

    domainvale.com Active Member

    Messages:
    64
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    58
    #7
    You can use a plugin call IP Ban or WP Ban. Ban all the enemy IP.


    Good Luck
     
    domainvale.com, Nov 14, 2013 IP