Enabled Captcha, still your plugin shows very high failed login attempts

Hi Swag,

The way traffic hits your site depends on how you configure your server stack. For example, if your site is mysite.com an attacker can still hit you with mysite.com/wp-admin http request even if you don’t have that address on your site. It leads to a 404 response from your server. This will happen even if you have a capture, 2FA or a firewall. If you have a web proxy in front of your web server, you can configure a rule to redirect requests to that URL back to them or to some other domain. This will still send a request to your proxy but since it’s configured to be in front of your web server, your web server’s resources will not get used. If you don’t have a web proxy configured and the rule created, any request an attacker makes will cause a response from your server and hence the use of resources. In addition captchas can be bypassed or cracked.

If you’re interested in upgrading to premium, we can further reduce your failed login attempts by running login requests through our cloud login firewall that can detect and neutralize many of the incoming attacks. Our cloud system collects IP information from thousands of WordPress web sites and makes blocking decisions based on that. We recommend it as a hands-free solution.