• Resolved Jay

    (@jaytfl)


    Hello there,

    For every successful login, Simple history creates a log with the message stating “Failed to login with username “xxxx” (incorrect password entered)”.

    Now, this is happening as we have enabled Login with OTP/SSO and Simple History is not regonizing such customization.

    How can we avoid such invalid entries from being logged?

    Thanks!

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author eskapism

    (@eskapism)

    It sounds like an incompatibility with the plugin you are using. Could you tell the name of the plugin + link to it, perhaps I can see what’s going on.

    You can customise what is logged using filters, for example with the filter simple_history/log/do_log. It does however require some custom coding.

    Thread Starter Jay

    (@jaytfl)

    Plugin Author eskapism

    (@eskapism)

    Thanks for replying with the name of the plugin. I currently have no time to debug this further since that plugin has pretty few users, but I’ll keep my eyes on the support forum and if more people report issues I will try to find time.

    Hello there…Just like Jay above, I also receive messages periodically stating “Failed to login with username “xxxx” (incorrect password entered)”. The message usually indicates that the failed login attempt took place some time in the past between my previous login and my current login. Country IP details are also included in the message. I usually put these IPs on a blacklist to block further login attempts. Am I reading too much into this or does this mean that someone is trying to hack or gain unauthorized access my website’s backend? Thanks in advance.

    Plugin Author eskapism

    (@eskapism)

    @rcdb2023 I can’t say for sure, but my guess is that someone is scanning your website and trying to get access. Usually if they find a user login with a weak password and get access they add spam blog posts with links to different places. Also, my guess is that it’s not an attack against your website specifically, but rather they just attack and try to get access to any WordPress site. If you have a strong password you should be ok.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Failed to login with username’ is closed to new replies.