Getting Strange Password Reset Emails Suddenly

  • Just started getting a couple dozen a day past 2 days out of nowhere. Not sure where they’re coming from and how to stop them. Did not install any new plugins for a long while.

    This message was created automatically by mail delivery software.

    A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed:

    [email protected]
    all hosts for ‘example.com’ have been failing for a long time (and retry time not reached)

    Someone has requested a password reset for the following account:

    https://www.domain.com/

    Username: Smith

    If this was a mistake, just ignore this email and nothing will happen.

    To reset your password, visit the following address:

    <https://www.domain.com/login/?action=rp&key=SIsHxwcstqEkuoFeeayQ&login=Smith&gt;

Viewing 4 replies - 1 through 4 (of 4 total)
  • Moderator James Huff

    (@macmanx)

    That’s not exactly a password reset email sent to you.

    That’s an email sent to you, as the domain administrator, letting you know that a password reset email failed to send for username Smith, most likely because [email protected] is not a real email address.

    Is there a user with username Smith? If so, it sounds like Smith may have locked himself out by changing his account’s email address to a fake one.

    Thread Starter Chad

    (@chadi)

    Strange enough I found 2 users and one was Smith. I have registration disabled, so now I’m baffled.

    Membership: Anyone can register (Off)

    Moderator James Huff

    (@macmanx)

    Hm, maybe they got in before you made that change?

    Best to delete them if you don’t know who they are.

    I have had the same problem. Over the last few weeks, I’ve gotten multiple emails from WordPress that someone has requested a password reset for my user name. There are only 3 users on our website and I’m the admin. I’m not sure how to stop this. Any suggestions would be appreciated.

    Here is what the WordPress email looks like:

    Someone has requested a password reset for the following account:

    https://sacajaweaaudubon.org/

    Username: lharris

    If this was a mistake, just ignore this email and nothing will happen.

    To reset your password, visit the following address:

    <https://sacajaweaaudubon.org/wp-login.php?action=rp&key=CrXFn8H8qr10ZM8WJnUW&login=lharris&gt;

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Getting Strange Password Reset Emails Suddenly’ is closed to new replies.