• I changed the default ‘admin’ to another username as suggested, then updated to the newest wordpress version 2 days ago.

    I noticed 5-10 tries of using the login ‘admin’ coming from the same IP yet the “Blacklist login attempts using ‘admin’ userid:” seems not catching this.

    I tried using a proxy and attempts to login using ‘admin’ and wordpress just display this ‘ERROR: Invalid username. Lost your password?’

    I know this worked before prior to latest WP update.

    Thoughts?

    https://www.ads-software.com/plugins/stop-spammer-registrations-plugin/

Viewing 2 replies - 1 through 2 (of 2 total)
  • The black list is for emails. I don’t check the user ids. I will change that right now.

    The user may have had a valid IP and did not break any of the other rules so it looked like a legit user trying to log in. Also once an IP winds up in the bad IP list, they are rejected before any other tests and the reason shows cached bad IP.

    Keith

    Thread Starter cloudduster

    (@cloudduster)

    Thanks.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Attempt to use 'admin' not blocked’ is closed to new replies.