Help with perceived security issue

  • DJA_440

    (@dja_440)


    2 years, 7 months ago

    Hello. I’ve been using WP for years and it still contnues to meet every need i have for the many sites i have built or maintained. One thing i’m always careful about and rather paranoid of is general security and i would appreciate your feedback.

    I have one site using 6.3 and a theme from Kadence; all works fine an no issues.

    For this particular site i have Wordfence installed (free) and throughout the day and every day someone / bot is attempting to log on with trying common usernames etc. (admin, sitename, etc.).

    I have Wordfence configured to lock out any account after one failed logon then not enable the next attempt for 2 days. From what i can see they aren’t getting in but it’s causing hundreds of emails an the Wordfence logs fill up quite quickly. There’s no performance or stability impact that i can see.

    I go through and block all of the IP’s locations (which for some reason are almost all from India or Phoenix, US.

    Any tips? I want to rename wp-login / wp-admin however i have tried this on a much older version and caused some issues that meant i had to restore some of the site.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Parin Doshi

    (@parin96)

    2 years, 7 months ago

    Hello,

    I recommend using the All-In-One Security (AIOS) – Security and Firewall plugin. It provides excellent features in the free version, including the ability to:

    • Change the database table prefix
    • Change the login URL to something other than wp-admin or wp-login.php
    • Back up your website
    • Set up a firewall
    • And much more!

    AIOS is a comprehensive security plugin that can help protect your website from a variety of attacks. It is easy to use and comes with a variety of features that can be customized to meet your specific needs.

    I hope this is helpful!

    Thread Starter DJA_440

    (@dja_440)

    2 years, 7 months ago

    Hi Parin, thank you so much. Really helpful.

    Does this plugin replace Wordfence or does it act as a complement?

    Thread Starter DJA_440

    (@dja_440)

    2 years, 7 months ago

    Thanks @parin96

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    2 years, 7 months ago

    WordFence is acting normally; turn off the emails as all they do is raise your anxiety.

    Parin Doshi

    (@parin96)

    2 years, 7 months ago

    Hi @dja_440,

    Both plugin will work separately, so you can use both in your site.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Help with perceived security issue’ is closed to new replies.