Failed Login attempt from a user called “System”

Hello @dannygarcia1971

Thank you very much for your using the WP Activity Log plugin. That’s indeed a good question.

The plugin uses two different event IDs to report failed logins:

Event ID 1002 to report a failed login of a user

Event ID 1003 to report a failed login for a non-existing user.

So if your username is “admin” and there is a failed login for the user admin, then the plugin will report event ID 1002 and the username will be “admin”.

But if someone tries a random login attempt, using a username such as “asdf” then the plugin will report the failed login using event ID 1003 and the username in the logs will be system, since “asdf” does not exist on your website.

You can read a more detailed explanation of how all this works in how to record failed login attempts on WordPress.

I hope the above helps. Should you require any further information, do not hesitate to ask.

Have a great day.

You’re welcome @dannygarcia1971

Please do not forget to spare a minute to rate our plugin and service. These reviews are really helpful.

Thanks a lot and have a great day.

Thanks @dannygarcia1971

Have a great day.