Preventing Wordpress Hackers | Bloggers Lair | Yakezie Forums

I have a wordpress plugin which automatically blocks IP addresses trying to log into my admin panel after a number of incorrect password attempts. I have noticed that I have started recieving regular notifications of this happening, so I locked my /wp-admin/ directory using 'Password Protect Directories' in CPanel.

This doesn't seem to have stopped the login attempts, they are somehow still getting to my login page. Has anyone seen this before and can they give me any tips?

I have a post going up on Modest Money this wednesday about protecting your site.  You shouldn't ever try to prevent access to wp-admin because there are many plugins that use it.  You should always lock down wp-login.php.  Nice work!

I would highly recommend the Better WP Security plugin. Once you set it up, it's the most full-proof WP protection I've seen. For example for log-ins into the admin panel, it actually renames and redirects the default WP log-in path to whatever you want to to prevent simple brute force attacks. You can also set a limit on incorrect log-in attempts, block certain users from accessing your site altogether, etc., etc.

Hope it helps you out!