No logging of failed login(s) since login-page is hidden

  • Resolved ThMarket

    (@thmarket)


    2 years, 11 months ago

    I use “WP Activity Log” for several websites. For one site it logged many failed login attempts, that’s why I moved the default-login-url from /wp-admin to an other url and also blocked the login-page for IPs who try to many failed logins in short time. I use the plugins “WPS Hide Login” and “WPS Limit Login” to do that.

    Since I use this plugins “WP Activity Log” only logs the successful logins but not the still many unsuccessful login attempts.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support robertabela

    (@robert681)

    Hello @thmarket

    Thank you for using our plugin.

    I am sorry to read about your problem. I have run a test and I can confirm that on a default WordPress install with our plugin and WP Hide Login and WPS Limit Login the plugin still keeps a log of failed login attempts.

    Can you please run a test to confirm if the issue is actually being caused by this particular setup? Would you be able to temporarily deactivate WPS Hide Login and Limit Login and confirm if WP Activity Log keeps a log of failed logins or not?

    Looking forward to hearing from you.

    Thread Starter ThMarket

    (@thmarket)

    Hello @robert681

    thank you for your kind reply.

    I did some more tests and came to the same result: failed logins that I produced by myself on the wp login page will be logged correct by WP Activity Log, even if WP Hide Login and WPS Limit Login are active.

    What seems to be not detected by WP Activity Log are login attempts via the XMLRPC gateway (which I noticed in the log of WPS Limit Login until I blocked XMLRPC for all my WordPress websites). I think in this case it doesn’t matter at all if the two foreign plugins are active or not. Unfortunately I can’t investigate this deeper at the moment as I can’t generate login attempts via XMLRPC by myself.

    Plugin Support robertabela

    (@robert681)

    Thank you for the update @thmarket

    That makes sense now, because the plugin does not monitor the XMLRPC yet. It is something we’ve been thinking about, but there are no concrete plans yet.

    At least we know that there are no problems at this stage. Should there be anything else we can assist you with, please do not hesitate to ask.

    Have a great day and thank you for using our plugin.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘No logging of failed login(s) since login-page is hidden’ is closed to new replies.