Wordpress login security?

[Cleo]

I remember seeing someone posting about a plug-in that would disable IPs after a certain amount of attempts.

Personally I just use really strong user names and passwords. It's not just my WP installs that have constant attempts it's all my scripts login pages. It's even my home network which lately seems to be under attack from Korea.

[lezinterracial]

Originally Posted by Cleo

I remember seeing someone posting about a plug-in that would disable IPs after a certain amount of attempts.

Personally I just use really strong user names and passwords. It's not just my WP installs that have constant attempts it's all my scripts login pages. It's even my home network which lately seems to be under attack from Korea.

Yea, I got somebody from Berlin and I got a bot that hits from 5 different IPs every so often.

Probably gonna make my passwords a little longer.

I hope the North Koreans aren't targeting Cleo's Links.

[housekeeper]

I've just started using Better WP Security and I like it a lot, bans users temporarily for a myriad of different techniques people use to compromise your site.

I've also got Bullet Proof installed on a couple of sites, also good.

The nice thing about Better WP is you can choose your level of security, some tweaks require a more significant server load than others, but I've been quite happy with it since I've installed it.

[lezinterracial]

Originally Posted by housekeeper

I've just started using Better WP Security and I like it a lot, bans users temporarily for a myriad of different techniques people use to compromise your site.

I've also got Bullet Proof installed on a couple of sites, also good.

The nice thing about Better WP is you can choose your level of security, some tweaks require a more significant server load than others, but I've been quite happy with it since I've installed it.

Thanks Housekeeper. I am gonna look into it.

I was just getting tired of seeing those attempted logins. I just renamed my wp-login for a while. Next time I want to login I will rename it back to wp-login. They are still hitting wp-login, even though it isn't there.