• Resolved markyspawn72

    (@markyspawn72)


    Can someone explain the failed login attempts area in the wordfence Firewall section?
    I see an old user trying to login my website but of course I deleted it many years ago.
    This old user has different IP’s listed. I traced the IPs and some are from Godaddy and some are from other servers. This person going thru VPN? or maybe a spam bot malware got a hold of this username and trying to continually login using this old username?

    Thanks for any info
    M

Viewing 2 replies - 1 through 2 (of 2 total)
  • Hi @markyspawn72,

    Many WordPress login bots will scrape the list of usernames from your site, and may even test old usernames long after they have been deleted.

    What I can recommend is blacklisting this old username, or blacklisting any invalid username.

    You can do this by:

    1. Go to Wordfence -> All Options
    2. Put the old username under Immediately block the IP of users who try to sign in as these usernames
    3. You may optionally check off Immediately lock out invalid usernames

    For example: https://i.imgur.com/zUYT1YG.png

    Dave

    Thread Starter markyspawn72

    (@markyspawn72)

    Thanks Dave!!! Will do thanks!

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Login Fails IP’s’ is closed to new replies.