Hide My WP

Forum Replies Created

Viewing 5 posts - 1 through 5 (of 5 total)

Save

Author

Posts
November 22, 2017 at 5:52 pm in reply to: My sites are getting constant authorization login attempts regardless of login #18856

securityisimportant
Post count: 5

However, I am still getting these
IP: 74.208.183.74 (74.208.183.74)
User ID:
Date: 2017-11-22T16:02:55+00:00
Total Impact: 30
Affected tags: dt id lfi

Affected parameters: REQUEST.img=..%2Fwp-config.php, GET.img=..%2Fwp-config.php,

Request URI: /wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php

Any suggestions on how to harden against these kind of attack vectors?
Thank you

November 22, 2017 at 3:48 pm in reply to: My sites are getting constant authorization login attempts regardless of login #18854

securityisimportant
Post count: 5

Yea I just found that option in your plugin to disable access for non-logged in users. That seems to have made a big difference in the login attempts

November 22, 2017 at 2:53 am in reply to: My sites are getting constant authorization login attempts regardless of login #18848

securityisimportant
Post count: 5

And to make matters worse,
there’s an automatic redirect to the “hidden” URL to login when going to ANY wordpress admin panel link such as
https://funwithnerds.com/wp-admin/

November 22, 2017 at 12:41 am in reply to: My sites are getting constant authorization login attempts regardless of login #18846

securityisimportant
Post count: 5

Yet I’m still getting login attempts every few minutes to every minute with checking service apache2 status

November 22, 2017 at 12:40 am in reply to: My sites are getting constant authorization login attempts regardless of login #18845

securityisimportant
Post count: 5

I also have cloudflare in “I’m under attack” mode on all my sites.
And the droplet IP address is the “root” site for the network so doesn’t benefit from cloudflare protections.
I would like to protect the root site completely.. and then block any and all access to any wordpress login method that these hackers use. SO that only I can login.
Author

Posts

Viewing 5 posts - 1 through 5 (of 5 total)

Save