Failed login; site lockout notification

  • Resolved ajit49

    (@ajit49)


    5 years, 1 month ago

    Saw a similar thread because I was having a similar problem. Getting message in the “Failed login Records” tab saying user admin failed to login.
    Dashboard—>Locked IP addresses showing admin with IP address locked out. Each login attempt has a different IP

    What i did:
    1. Changed login page from wp-admin.php to something else
    2. Changed time length of lockout from 60 to 120 minutes
    3. Changed instantly lockout user name to include admin
    4. Added my IP address in the Brute Force–Login Whitelist
    5. Disable Pingback Functionality From XMLRPC: YES checked box
    6. Enable Login Lockdown Feature Checked

    So, these admin login stopped for several days. I thought i was done. But today, they restarted.

    I also asked my hosting provide to whitelist my IP
    They also added bad-bot-blocker/.htaccess to the htaccess file.
    That also worked for a few days. But restarted today

    Help

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    Have you enabled Disable Users Enumeration: under Miscellaneous -> Users Enumeration? They might also try this method to access your username.

    Also make sure none of your plugins can reveal any username details.

    Let me know if the above helps you further.

    Kind regards

    • This reply was modified 5 years, 1 month ago by mbrsolution.
    Thread Starter ajit49

    (@ajit49)

    Hi,
    Yes, I enabled Disable Users Enumeration: under Miscellaneous -> Users Enumeration?
    It worked for a few days. However, the logins using user “admin” started again.

    Help!

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    If you see admin in the failed login records, doesn’t that mean that the plugin is blocking users login in with admin as a username?

    Regards

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Failed login; site lockout notification’ is closed to new replies.