• Elevated Dad

    (@outwardjourney)


    This may not be an issue with WPS specifically, but I installed it, changed the login path and it worked good for a few days.

    My site is static, no blog posts, etc.. However, bots or hackers have found the newly updated login path I made in WPS Hide. How are they able to do this? Does WPS Hide store any info somewhere that they’re seeing it in a page somewhere?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support Lea WPServeur

    (@leacomm)

    Hi,
    Thaks for using WPS Hide Login !
    Do you have a login button somewhere on the site?
    Are robots trying to access the default /wp-admin URL or the site’s custom login URL?

    Thread Starter Elevated Dad

    (@outwardjourney)

    I am using WPS hide with the limited login plugin. It’s showing they’re accessing through the new path I created with WPS and not the /wp-admin.

    I’ve also gone as far as to update .htaccess and ensured all meta data from any pages/posts didn’t include an active user/author name.

    I just can’t figure out how or where the bot is getting the URL. It’s important to note that I have WPS installed on multiple sites and at the moment, there is only 1 site currently under attack. 😩

    I am using Elementor as my builder, so I don’t know if that’s an issue. I couldn’t find any correlation.

    Plugin Support Lea WPServeur

    (@leacomm)

    Hi,

    With the information provided, it’s difficult to know the exact cause of the issue. I recommend searching your database to find where the custom login URL might be stored, so you can remove it if necessary.

    It would also be helpful to compare with your other sites using WPS Hide Login, as a plugin might be reusing this URL and causing the problem.

    And check if the login attempts come from the same IP addresses, and if so, block those IPs to reduce the attacks.

    Best regards.

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.