supamerz

Here is what mine looks like
WordFence Settings – Block Login

Hey,

I’ve been getting hacked by some guy as well for the past few weeks. It’s been exhausting, to be honest.

Earlier the file system got hacked and they were utilizing a ton of bandwidth. Upon deletion of those directories, the “bots” kept pinging the non-existing files, causing a bunch of 404s.
I fixed this by adding a redirect to all of the highly affected directories/files. The redirect was to 127.0.0.1 — so instead of having 40,000+ instances of 404’s it just redirects.

I also have had the issue of the xmlrpc.php getting pinged, NON-Stop. I disallowed access to this file which caused a 403, which in turn, I know that other wordpress websites wont be able to send pings/tracks back to mine.

I’m still trying to figure out how the hacker is getting into my wordpress site. I’ve got BulletProof, Sucuri, Wordfence, all working together to minimize the risk and track logins.

In your case, I would install Wordfence, and under settings tell it to immediately ban IP when trying to login with a non-existing username. Also, tell it to block ip if they try more than 3 times etc. Make sure to delete the “admin” user account and add the “admin” user account as another way for them to get banned.

Hope any of this helps. I’m still struggling myself.