Reducing login attempts by blocking any IPs that try specific URLs
-
Hi,
I’m looking at ways to reduce login attempts and saw that we’re getting a few through the following URLs:
/wp-login.php?action=register
AND
IP_Address/autodiscover/autodiscover.json?%40zdi%2FPowershell=
I’m thinking of automatically blocking any IPs that try the above URLs. For, we don’t have any users register, and we don’t have any Microsoft Exchange Servers.
Wondered if anyone has done the above before and if it had any adverse effect elsewhere in WordPress, while with the Powershell URL, if we wanted an outlook email in the future – that contact forms were redirected to – would this be affected by blocking any IPs that try that specific Powershell URL?
On a similar note does anyone have any first-hand experience if password protecting wp-login.php is safe to do? Or if it breaks plugins, site etc
We have other security methods etc. Just looking for any experience on blocking the above URLs & wp-login.php
-
Hi @t-p
Thank you for your message. Already have one of these in use, and it’s great.
My query was really regarding as an extra precaution – blocking IPs that access those two URLs, but before doing so hoped someone might have had experience themselves with this?
And whether it’s safe to password protect wp-login.php, I’ve done this before and had no problem. But in comparison to password protecting wp-admin there is little on wp-login.php so just looking for someones long-term experience in doing so.
- The topic ‘Reducing login attempts by blocking any IPs that try specific URLs’ is closed to new replies.