So i just built this cool wordpress site for a client. And installed some all necessary stuffs.
I installed this secuirity plugin that lets me know by mail if someone is trying to login into my site.
The thing is that there is the particular ip address from ukriane that has always been trying the acess my wp-admin.
I have installed a plugin that enables change the www.mysite.com/wp-admin url but i still keep geting those notifications, though he keeps failing the login attempt.
I think its a matter of time before he succeds cause he his too persistent i need your help on how to stop this please

Why not blacklist the IP address.

Use a more stronger password. UpperCase, lowerCase and special characters. You should also consider blacklisting the ip address the attack is coming from.

tgmservice:
So i just built this cool wordpress site for a client. And installed some all necessary stuffs.
I installed this secuirity plugin that lets me know by mail if someone is trying to login into my site.
The thing is that there is the particular ip address from ukriane that has always been trying the acess my wp-admin.
I have installed a plugin that enables change the www.mysite.com/wp-admin url but i still keep geting those notifications, though he keeps failing the login attempt.
I think its a matter of time before he succeds cause he his too persistent i need your help on how to stop this please

install wordfence

you just said what i wanted to say, op install wordfence and go to settings and limit login attempts, so that once he fails to get the password he will be blocked from acessing your site for 60 days

yomalex:
install wordfence

Afam4eva:
Why not blacklist the IP address.

thanks how do i blacklist it besides its dynamic IP it changes

tgmservice:
thanks how do i blacklist it besides its dynamic IP it changes

you have gotten your answer except if the security plugin you mentioned is actually wordfence,

Onyejemechimere:
you just said what i wanted to say, op install wordfence and go to settings and limit login attempts, so that once he fails to get the password he will be blocked from acessing your site for 60 days

D34lw4p:
Use a more stronger password. UpperCase, lowerCase and special characters. You should also consider blacklisting the ip address the attack is coming from.

then it could be from any of the plugins you installed on the site or even the theme you are using, so check if they are still being supported and updated. but dont panic

oh so some themes are dangerous like that? pls can u specify which theme and plugin to avoid and is it wordpress security or assistance? thnks

warrenweste:
oh so some themes are dangerous like that? pls can u specify which theme and plugin to avoid and is it wordpress security or assistance? thnks

Yes, themes and plugins and even the wordpress core that have not been updated will have vulnerabilities that can be taken advantage of.

I cant specify, just make sure you update your wordpress core files, and any theme or plugin you are using. and use only themes and plugins that are regularly updated by the developer.

you can check the link below to see the themes and plugins with vulnerabilities for the month of November.

http://www.ademike.com/blog/november-wordpress-vulnerabilities-roundup/

iamademike:


Yes, themes and plugins and even the wordpress core that have not been updated will have vulnerabilities that can be taken advantage of.

I cant specify, just make sure you update your wordpress core files, and any theme or plugin you are using. and use only themes and plugins that are regularly updated by the developer.

you can check the link below to see the themes and plugins with vulnerabilities for the month of November.

http://www.ademike.com/blog/november-wordpress-vulnerabilities-roundup/

Ok thanks, what's the name of that your theme?

warrenweste:

Ok thanks, what's the name of that your theme?

Enfold