CrowdSec
The CrowdSec plugin proactively blocks requests coming from known attackers. It does so by either directly using CrowdSec Blocklists Integration or by connecting to your CrowdSec Security Engine. Key Features: Instant CrowdSec Blocklist: Quickly block known WordPress attackers in a few clicks. Detect and block admin bruteforce attempts and scans of your WordPress Site. Remediation metrics: Enabling you to see the efficiency of the protection. (Console Users) Plug any of your existing Blocklist Integrations. (CrowdSec Security Engine Users) Apply decisions and subscribed blocklist of your security engine within WordPress. You can: Block aggressive IPs Display a captcha for less aggressive IPs
DFX Random User IDs
This WordPress plugin randomizes the user_id for the user created on WordPress setup, removing one potential attack factor from the site. How it works Once activated, the plugin will immediately replace the ID for the default admin user (with user ID 1). By default, the plugin will use random user IDs between 1 and 4503599627370495 (to ensure compatibility with Javascript code using the user ID). All newly created users from that moment will be generated with a random user ID in the defined range. How to customize the range for new user IDs You can customize the range used by the plugin for the random generated user IDs by using the WordPress filters dfx_random_user_id_max_id and dfx_random_user_id_min_id. For example, if you want to have all your user IDs between 1000 and 9999 you can add the following lines to your theme’s functions.php file: function set_dfx_max_user_id( $default_max_id ) { return 9999; } add_filter( 'dfx_random_user_id_max_id', 'set_dfx_max_user_id' ); function set_dfx_min_user_id( $default_max_id ) { return 1000; } add_filter( 'dfx_random_user_id_min_id', 'set_dfx_min_user_id' ); Probably, you’ll want to add these lines to your code before activating the plugin, so your new random main admin user ID is inside your desired range.
