Home Plugins block default login attempts
Block Default Login Attempts logo

Block Default Login Attempts

by Beej on WordPress.org

Completely block default admin user login attempts in WordPress.

(1)
A screenshot of a typical log entry

A screenshot of a typical log entry

The greatest hack focus on a WordPress site seems to be trying to log in with
the default username “admin”. This plugin detects all login attempts with that
username and exits with a 403 Forbidden header. This should eventually
discourage login bots from continuing to pound your site.

All attempts are logged inside the /wp-content/plugin-data folder, just in case
you need the info. Logs are kept for up to 30 days.

Active installations20+
Weekly downloads
9-18.18%
Version1.3.1
Last updated5/21/2014
WordPress version3.0
Tested up to3.9.40
Tags
bothackhackerloginprotect