Hello @trtitsupport ,
Experiencing “Anonymous User Login Attempts” on your WordPress admin panel is a common issue, as it is a primary target for brute-force attacks. Here are several steps you can take to secure your WordPress site and mitigate these attempts:
1. Limit Login Attempts
Use a plugin to limit the number of login attempts. This can help prevent brute-force attacks by temporarily blocking IP addresses that exceed a certain number of failed login attempts.
Recommended Plugins:
Limit Login Attempts Reloaded
WP Limit Login Attempts
2. Use Two-Factor Authentication (2FA)
Implementing two-factor authentication adds an extra layer of security by requiring a second form of verification in addition to the password.
Recommended Plugins:
Two Factor Authentication by Plugin Contributors
Wordfence Security
3. Change the Login URL
Changing the default login URL (/wp-admin or /wp-login.php) makes it harder for attackers to find the login page.
Recommended Plugins:
WPS Hide Login
Rename wp-login.php
4. Enable ReCAPTCHA
Adding Google reCAPTCHA to your login page can prevent automated login attempts.
Recommended Plugins:
reCaptcha by BestWebSoft
Login No Captcha reCAPTCHA