How they found your new login URL, I don’t know and can’t say as it could be a number of different things.
As for the login attempts, that’s very simple. There’s 1,000’s of bots around the internet that try to log into any site that they can find with hacked/guessed account details until they find one that they can get into. They just keep on trying.
As long as your passwords are secure and your site is up-to-date and secure you have nothing to worry about and won’t have a problem.
Which plugin did you use to change the admin URL?
Or was it custom coding?
In any case, I’m sure there are all kinds of URL requests that may be automatically redirected to the login page, even if you change the default login URL.
Attempts to log in or otherwise compromise our websites WILL always happen, and there’s not a whole lot we can do about that.
It’s the job of your security solution to ensure those attempts don’t succeed.
Hi @gappiah,
Thank you for your response. We are using WPS hide login plugin, and I can’t exact reason how they are finding out new admin URL. Do you know any general circumstances how they would find WordPress admin URL?
Thank you
