• i just setup my website, finished (and still in maintenance mode) not an hour i got around 12x failed login attempts. Naturally if someone try to rob your house but failed you will change your doorlock, or something related to security, right ? first i set the blocking IP to 72 hours, IT DID NOT WORK AT ALL. Yes, you guys didn’t read it wrong.

    Second, what did i change ? I CHANGE THE LOGIN LINK, AND GUESS WHAT ? MORE INTENSE LOGIN ATTEMPTS SPAMMED IN MY E-MAIL FOR MORE THAN 20x IN 4 HOURS !!!!!!!

    HOW THE FXXX THEY FIND OUT AND TRY TO LOGIN ? EVEN I MYSELF HAVE DIFFICULTIES LOGIN, BUT THESE GUYS SPAM LIKE CRAZY, YOU THINK ABOUT IT.

    IF YOU GUYS SEE 5 STAR RATING, ALL IS ALSO FAKE, DON’T TRUST THESE GUYS. 1 STAR RATINGS HAS BEEN TAKEN DOWN ONE BY ONE BY THE ADMIN !!!!!!

Viewing 2 replies - 1 through 2 (of 2 total)
  • I don’t really know what is happening with your website, but if the plugin was sending fake attempts, it would surely be exposed in the 5+ years of its existence. Bots can find your website through many avenues including a shared host IP address. Have you checked the origin of the IP addresses of the login attempts or any research of that matter? Probably not.

    Plugin Author WPChef

    (@wpchefgadget)

    Our plugin also monitors the xmlrpc.php address that a lot of users have enabled. If you rename or move your login page, the xmlrpc still remains unprotected and impacts your stats. B.c. brute force scripts know about it and keep attacking it. Not every user has enough knowledge to knows about this one.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘FAKE ATTEMPTS, DONT INSTALL’ is closed to new replies.