Wordpress log attempt spam?
-
i have used wordfence on wordpress and I am getting a lot of alerts of "people" registering on my blog but then having over 20 failed login attempts. Gives the IP addresses. Anyone else had this issue and should I just block the ip addresses? How have you guys fixed the issues?
-
You can install something like https://wordpress.org/plugins/better-wp-security/
There are settings to auto-block people after a certain amount of incorrect logins (or blacklist).
I also recommend changing some Wordpress defaults (like the login/register page) which will help prevent lots of bots.