Someone is trying to hack my website (seems like Distributed Brute force attack)

[Pixelbender]

Hi Guys,

I am wondering if someone has some idea who / what is orchestrating the attack on my website.

I have a wordpress based website which is locally hosted. I have been receiving email notifications all day about failed login attempts and locked user accounts.

I originally had the site developed by a reputable developer, and he seems to have done a decent job of setting up security as far as I can tell.

I have had a look at the security section and I have noticed that the attacks are focussing on the admin account and test accounts, but every attempt is from a different IP and mostly different country as well.

There is nothing valuable to gain from the site and I cant thing why someone would be looking to hack it.

Does anyone have any thoughts on the matter?

Thanks

I've used this before and my traffic dropped quite a lot, so I'll assume they stopped trying to hit my site since they didnt know it was wordpress. It takes a bit of configuring, but spend a night going through everything and you'll be fine. I'm sure.

Anybody else have experience with this plugin? Good or bad - http://codecanyon.net/item/hide-my-wp-no-one-can-know-you-use-wordpress/4177158

 

[shadowfox]

I've used this before and my traffic dropped quite a lot, so I'll assume they stopped trying to hit my site since they didnt know it was wordpress. It takes a bit of configuring, but spend a night going through everything and you'll be fine. I'm sure.

Anybody else have experience with this plugin? Good or bad - http://codecanyon.net/item/hide-my-wp-no-one-can-know-you-use-wordpress/4177158

Haven't worked with it myself, but I'd take any claim that a plugin can entirely hide the fact that you're using a WP installation with a pinch of salt. It might hide it from the less sophisticated crawlers, but anybody who is reasonably determined will be able to figure out that you're using WP.

On the other hand, the people who run these bots usually go for the least effort approach, so maybe its fine. I'd actually have to take a look at a site running the plugin to see how well it works, but based on some of the comments people can still find out whether you're using WP or not.