Not reporting all login attempts

  • Resolved redbullpeter

    (@redbullpeter)


    7 years, 7 months ago

    Hi,

    I’m using Simple History plugin and I’m noticing a discrepancy with the reporting of failed login attempts. Some of the failed login attempts reported by Simple History does not appear in the Wordfence plugin. There appears to be no commonality. Examples are:

    1) Two attempts (different usernames tried) reported from an IPv6 address by Simple History. Only one attempt and username reported by Wordfence.
    2) One attempt from an IPv4 address reported by Simple History. No attempt reported by Wordfence but the IP address was listed as recently blocked.

    Can you give any insight?

Viewing 2 replies - 1 through 2 (of 2 total)

  • Hi @redbullpeter,

    This is due to the different logic used by each plugin.

    Wordfence does not count the login action that results in a block.

    So if you have “Lock out after how many login failures” set to 2, Wordfence will report 1 failed login and Simple History will report 2.

    Same explanation applies to your second point. If the first login attempt results in a block immediately, it doesn’t count.

    Thread Starter redbullpeter

    (@redbullpeter)

    OK. Cool.

    Thanks for the explanation.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Not reporting all login attempts’ is closed to new replies.