Top 5 Failed Logins

  • Resolved kike0128

    (@kike0128)


    4 years, 4 months ago

    Hello
    I have a small suspicious case that the plugin is not working well.

    In the Top 5 Failed Logins section there is a Username SEE IMAGE that is registered as “Partner” (it is like clients, but with a discount in the purchase).
    When we saw how many times it was connected, we checked the database tables, and deleted all the records of this Username, except the main user record in wordpress.

    The next day we return to find several connections 6 times, another day 7 times, etc, again from the same user.

    As he is a person on the team, we have spoken with him, and we have verified that he does not connect to the web.

    Why does it appear every day in this list with a daily increase in connections, if we have deleted the data from the tables?

    There is some explanation to this.
    It can be fixed?

    Thnaks
    kike0128

Viewing 3 replies - 1 through 3 (of 3 total)

  • I’m not related to this plugin, but:
    A failed login means that someone happens to know (or has guessed) a username, and now is trying to guess the corresponding password.
    Usernames aren’t regarded as secret information. They may be guessed. Sometimes you may find the usernames in connection with posts and comments.

    So make sure that you’re always using strong passwords.

    If this is too annoying, then you may think of ways to block these requests even before they hit WordPress. For instance, if they’re always originating from the same IP, then you could try to block that IP address.
    Just make sure that you don’t create more/other problems for yourself while doing this.
    My personal view is that one may log failed login attempts in order to spot some big problems. But the fact that the login failed means that the password did exactly what it should. ??

    You may also consider adding 2FA (two-factor authentication) to your site. Then even finding the right password wouldn’t be enough to actually get in.

    Thread Starter kike0128

    (@kike0128)

    If you look closely at the image you will see that this case is not a failed login

    Plugin Support WFAdam

    (@wfadam)

    Hello @kike0128 and thanks for reaching out to us!

    This could be related to a cache plugin or that user’s actual cache within the browser. I suggest clearing both if possible.

    If you check your Tools > Live Traffic, you should be able to locate these failed logins by that user. Are they all from his IP?

    Let me know what you find!

    Thanks!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Top 5 Failed Logins’ is closed to new replies.