• Resolved silentsoliloquy

    (@silentsoliloquy)


    Dear dev.
    The site has been under hack attack for the past couple of days. I have a list of “top 5 failed logins” with some 323 registered attempts with “admin” and “[login]” usernames (bruteforce attack maybe?), but it would be great to see which passwords they attempted to use (since people I specifically know would attempt specific passwords to hack the website). Is there a way to access such failed passwords list? It would help me identify the perp within my organization.
    With kind regards…

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Hey @silentsoliloquy,

    This isn’t something that Wordfence supports. I understand your interest in getting the passwords, but to be honest, any attempt to somehow log your site’s password uses/tries would be very insecure. There’s only so much we can do to prevent an attack. It’s more about making sure they aren’t successful, which it sounds like Wordfence is doing.

    Please let us know if anything else comes up, or if you have any additional questions.

    Thanks,

    Gerroald

    Thread Starter silentsoliloquy

    (@silentsoliloquy)

    Thank you for your help, no other questions on this issue. Still under hack attack (now more machines joined), but for now Wordfence is holding. Hope we can get funding for full version. We know who is behind the hack attempts, but can’t prove it unfortunately.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Full list of failed login attempts/entries’ is closed to new replies.