I have a plugin that prevents multiple unsuccessful logins.
As can be seen, the spammers try several combinations like: admin (the default), then site name, and several others.
|
My company, Endpoint Cybersecurity, offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 audits. It also works with companies to create and deploy a Secure Software Development Lifecycle, with various levels of AI support. |
|
||
| Get in touch with us here: https://www.endpoint-cybersecurity.com/contact/ |
It is critical to create a user name that is different than the obvious names, especially the default username “admin”.
Another interesting thing is that I get both IPv4 as well as IPv6 IP addresses. More and more IPv6.
Also, a spammer will continuously try to hack you, because they have automated scripts.
So, it makes sense to block them for a longer time.
For example, I use these settings:
The plugin I am using is “Limit Login Attempts Reloaded”.
I am not affiliated with them in any way.
© Copyright 2021 Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca - Security & Technology
Want to work with me on this topic?
Check Endpoint Cybersecurity to see the consulting services we offer.
You must be logged in to post a comment.