Wordfence not logging failed login attempts any more

  • Resolved zsimaiofgr

    (@zsimaiofgr)


    8 months, 3 weeks ago

    Hello,

    i have the suspicion that Wordfence has stopped monitoring failed login attempts.

    I haven’t seen any failed login attempts for at least 8 days and this is a site that was regurarly a target for brute forcing attempts.
    I have strict login policy and strict crawling policy.

    I tried making some failed login attempts my selft but that were also not monitored by Wordfence.
    These were the last failed attempts monitored by Wordfence.

    I am running Wordfence Version 7.11.1 and WordPress v6.4.2.
    Any ideas?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter zsimaiofgr

    (@zsimaiofgr)

    @wfpeter, @wfmark
    today i updated to the latest version of Wordfence and i tested my self using a wrong password (my ip is NOT on the allow whitelist).
    Wordfence did not count the failed login attempt.
    I am using the default wp-login.php page.

    This is very very strange indeed.
    How can i troubleshoot this?
    I am very worried that my site is not protected any more against brute force attempts ??

    • This reply was modified 8 months, 3 weeks ago by zsimaiofgr.
    Thread Starter zsimaiofgr

    (@zsimaiofgr)

    I found it!
    There is a serious conflict with LoginPress latest version, which leads Wordfence not to correctly monitor failed login attempts.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Wordfence not logging failed login attempts any more’ is closed to new replies.