• Resolved Albertus59

    (@albertus59)


    I have a WP site with 2 admin users, no standard admin account.
    Ithemes Security plugin running
    Right file permissions for maps, files etc.

    Yesterday there were login attempts with only these two usernames, first username may be guessed because person is publishing articles, second username not.

    Attempts were during 20 minutes, from i.p. adresses all over Europe.
    How can the second username be used by the wannabee intruders?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Andrew Nevins

    (@anevins)

    WCLDN 2018 Contributor | Volunteer support

    It is not my intention to cause offence, but should it matter how they acquired the second username? Usernames are not secure. There are ways in WordPress to display the username because it is not considered a security risk by the core team.

    Thread Starter Albertus59

    (@albertus59)

    ok, didn’t know it was possible to display usernames (who never posted something) without login.
    Thnx.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Security-login attempt’ is closed to new replies.