Wordpress login security?

[lezinterracial]

Originally Posted by artwilliams

(Ooops! I see that you're doing what I suggested below. Sorry.)

Here is what I suggest. Add the following text to your .htaccess file:

<Files ~ "^wp-login.php">
Order deny,allow
Deny from all

Allow from x.x.x.x
</Files>

You will need to replace x.x.x.x with your current IP address.

Not sure what your current IP is? Go to Google.com and type "what is my ip?" No one will be able to login to your WP account except from your IP.

I tried something like that before. But I didn't get it to work. Must have been a typo or something. But I may try it again. Thanks.

[housekeeper]

I'm seeing largely 'too many attempts to open a file that does not exist' which is getting blocked by WP security, and some 'bad login attempts'. But the brute force isn't as sophisticated or intense as what is run on paysites, so far.