Forgot Password attack attempts even though it is set in Wordfence to block?

  • Resolved klloyd86

    (@klloyd86)


    1 year, 2 months ago

    Hi I have an issue where forgot password attempt attack is happening on a website – however I don’t think protection is working

    Lock out after how many forgot password attempts? is set to 2

    Within 5 minutes

    • However we have just had an attempted attack on forgot password around 30 times within 3 minutes where the user is not being blocked – just redirected – Can someone advise please??
Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @klloyd86, thanks for getting in touch about this.

    In order to confirm whether there might be an issue with the setting, you don’t need to show me all 30 cases, but would it be possible to screenshot and share 4 or 5 expanded lines from your Live Traffic showing this occur more than twice in a 5 minute period? You can obscure any sensitive information like IPs or domains, but it’d be good to still see the visited URL path after the domain and other supporting text about the visits.

    Screenshots can be included directly on the forums now or through a third-party link like those provided by Imgur or Snipboard.

    Thanks,
    Peter.

Viewing 1 replies (of 1 total)
  • The topic ‘Forgot Password attack attempts even though it is set in Wordfence to block?’ is closed to new replies.