Alert from Wordfence but wp-admin does not longer exist

  • Resolved Sebastian Misniakiewicz

    (@sebastianm)


    5 years ago

    Hi.
    Whe Wordfence is sendning me alerts like this
    “The Wordfence administrative URL for this site is: https://XXXXXX.pl/wp-admin/admin.php?page=Wordfence
    A user with IP addr (…) has been locked out from signing in or using the password recovery form for the following reason: Used an invalid username (…)
    when the admin login page is not wp-admin (I changed this)
    Thanks for your help ??
    Sebastian

Viewing 4 replies - 1 through 4 (of 4 total)
  • WFGerroald

    (@wfgerald)

    Hey @sebastianm,

    Are you using a plugin to hide the standard WordPress login page? Either way, changing the custom slug doesn’t remove the wp-login.php file, it’s still there, only the login slug has been customized.

    It’s worth mentioning that hiding the login URL doesn’t have as many security benefits as you’d think, not to mention it can break WordPress and plugin functionality. Here are more thoughts from our CEO on this topic below.

    Please let me know if you have any questions, or if I’ve misunderstood the issue.

    Thanks,

    Gerroald

    • This reply was modified 5 years ago by WFGerroald.
    Thread Starter Sebastian Misniakiewicz

    (@sebastianm)

    Hi Gerroald
    Now I see why I am reaceiving these messages ??
    One question – how to use 2 factor authentication when we do not have statis IP address ?

    WFGerroald

    (@wfgerald)

    Hey @sebastianm,

    Two-Factor isn’t IP specific, so you can use it as you would with a static IP.

    Please let us know if anything else comes up.

    Thanks,

    Gerroald

    WFGerroald

    (@wfgerald)

    Hey @sebastianm,

    We haven’t heard back from you in a while, so I’ve gone ahead and marked this thread as resolved.

    Please feel free to open another thread if you’re still having issues with Wordfence.

    Thanks,

    Gerroald

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Alert from Wordfence but wp-admin does not longer exist’ is closed to new replies.