• Resolved EAC2015

    (@eac2015)


    Hi – I am wondering why failed login attempts, “Username Unknown username failed login,” are only rated as a low security threat. Why are they not rated higher? What am I missing in my understanding of the situation, because it seems serious to me. Thanks.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support robertabela

    (@robert681)

    Thank you for using our plugin and for posting on these forums EAC2015.

    That event is basically being reported when someone / bot tries to log in using random usernames. When you have a website online this happens all the time and it has no impact or security implications.

    It becomes a problem when there are many failed logins of a user that exists on your website. Even then, as such it is not a big problem, but one should keep an eye on these issues and / or install a plugin to limit login attempts.

    May I ask why you think this is a higher security risk? I’d like to learn about your use case, maybe there is something we can help you with in a different way.

    Looking forward to hearing from you.

    Thread Starter EAC2015

    (@eac2015)

    Thanks. I thought it was a problem that people are trying to get into our site. There are repetitive attempts from certain addresses. Why is it not a problem? Don’t they ever get in eventually? We have good passwords, CDN, 2FA, and security system from our host, but couldn’t someone still get in? I block all of them and in some cases, entire countries.

    Plugin Support robertabela

    (@robert681)

    Login attempts happen all the time and are not a problem, especially if you use strong passwords and 2FA. If you want, you can take it a step further and:

    1. Change the URL of the login page
    2. Limit login attempts
    3. Restrict login page traffic with Geoblocking

    I hope the above helps. Should you have any further questions, please do not hesitate to ask.

    Have a great day.

    Thread Starter EAC2015

    (@eac2015)

    Thank you!

    Plugin Support robertabela

    (@robert681)

    You’re welcome. In the meantime, please do not forget to spare a minute to rate our plugin and support. These ratings are really helpful.

    Thank you and have a great day.

Viewing 5 replies - 1 through 5 (of 5 total)
  • You must be logged in to reply to this topic.