user locked out from signing in

  • Resolved macpheek

    (@macpheek)


    5 years, 4 months ago

    Hi, this morning I have 100 emails notifying me of a user locked our from attempting to sign in, Is there any reason why I might suddenly be getting loads of attempts and anything I can do to stop it?

Viewing 4 replies - 1 through 4 (of 4 total)

  • Hey @macpheek,

    These attacks can be pretty random. Can you please check in Wordfence > Live Traffic to see why they’re getting locked out?

    Thanks,

    Gerroald

    Thread Starter macpheek

    (@macpheek)

    Hi, the logs all say this:

    ______ attempted a failed login using an invalid username “______”. https://stormroofingltd.co.uk//xmlrpc.php
    11/15/2019 6:50:06 AM (1 hour 46 mins ago)
    IP: 206.189.134.14 Hostname: 206.189.134.14
    Human/Bot: Human
    Browser: Firefox version 62.0 running on Linux
    Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0

    Hi @macpheek,

    I took a look at the IP address, 206.189.134.14.

    It seems to be from DigitalOcean, which is cloud provider. This means anyone can rent one of their servers to send out requests.

    In your case, this IP address is attempting to login to your site with a random selection of common usernames / passwords. For example, they may try admin / password or administrator / password to see if they can get into your site.

    What I can recommend is to block this IP address within Wordfence -> Firewall -> Blocking.

    Dave

    Thread Starter macpheek

    (@macpheek)

    thanks for your help, I already blocked it and it seems to have helped. Thanks for looking into it

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘user locked out from signing in’ is closed to new replies.