Website getting failed login attempts

Hello,

Thanks for using WPS Hide Login.

Is “Everyone can sign up” case checked in general settings ?

Is there any comments section where your users can reach login page ?

No, this option is not turned on.
There are also no sites with any form of available comment or registration.
There was never such a thing.

2 days ago had 132 failed login attempts
1 day ago 177
and so far today 195

It’s growing..

I’m having this same issue… It says the page they’re logging into is my https://mywebsite.org/wp-admin/admin.php?page=Wordfence page. When I click on it, it goes to my 404 page which I set up with WPS Hide Login settings, so that’s working correctly. How are they getting on this URL?

Is that all you can do?

Hello @kodexyz @juliesuccess

I’m going to ask to ou dev team about this issue.

I’ll come back to you with answers.

Just an FYI, but I am experiencing the same issue on a website. I renamed the wp-hide-login folder to bypass-wp-hide-login and used the default wp login link /wp-admin but still cannot get the login prompt.

However, I did install the WP Hide Login on another website and it is working fine. At this point, I’m totally confused!

Hello @lukedouglas

Is there any difference between your two WordPress installs ?

Hello @juliesuccess @kodexyz

Have you tried to contact Wordfence support about it ?

@seinomedia i’m not using that plugin

So @lukedouglas @juliesuccess

If you’re using Wordfence, please contact Wordfence.

@kodexyz

Have you tried to deactivate all other plugins except WPS Hide Login ?

Are you using a CDN or performance tools like Cloudflare ?

Is your install up to date (core, plugins, theme) ? Is your WordPress clean ?

Found the issue. It was with Cloudflare. I finally resolved the issue by disconnecting the site from Cloudflare completely by changing the DNS settings at the registrar, like it was before I set up Cloudflare, and checked to ensure I could login. Then I went through the process to set up Cloudflare again and, viola, it worked. Very weird as I use Cloudflare on a lot of clients websites.

@seinomedia I’m not really able to disable all the plugins but we are not using cloudflare or any other performance plugin.

Hello @kodexyz

Then, how can you be sure there’s no conflict between other plugins ?

This issue started happening for me too, I’m getting reports of failed login attempts at my WPS Hide Login login page, but no-one knows that page except me, so am I supposed to believe that someone just guessed it? It’s unlikely as it’s hard to guess!

They are trying to guess the pwd for the user ‘admin’ which I guess is pretty typical, but they won’t have luck because my site does not have a user by that name ??

Now I have changed the login page location in the plugin, and will monitor to see if the issue still presents itself.

I have not added any new plugins lately (but of course there have been updates) and I don’t use Cloudflare.

• This reply was modified 2 years, 1 month ago by semoliner.
• This reply was modified 2 years, 1 month ago by semoliner.