Login Attempt Log

Hi @ajiaim, thanks for reaching out.

Successful logins can naturally still be maliciously obtained credentials or undesired logins for the site owner to monitor, so there is no option to remove those from the WAF admin page.

In Wordfence > Tools > Live Traffic there are filters to only show security-related traffic, omit specific usernames & IPs and to skip logging of publishing access users (non-admins) but they don’t apply to the page you are referring to.

I could submit a development request to apply these filters to the firewall admin page if you would like me to do that on your behalf? We have channels to properly report features and they will always be discussed.

Thanks,

Peter.

Is it possible to manually clear them within WordFence?
Do they get stored in a file or in the database?

No need to submit the development request.

Hi @ajiaim,

Live traffic logs should be truncated when they hit the limit of rows or days specified that they should be stored for. These and the logins/logouts are stored in the wflogins table (which will be prefixed) and are always recorded regardless of other filters.

Thanks again,

Peter.