Top 5 failed logins not working

On the dashboard, are the other two sections for top IPs and top countries working correctly?

Thanks for already testing the other plugins — it’s currently working on our test servers, so that would be what I would normally ask next!

Can you check if you click on the Live Traffic view on the Wordfence menu, on the “Logins and Logouts” tab, do you see failed logins there? If so, do you see attempts with both valid and invalid usernames?

Also, does your site have many regular users who log in, or is it mostly you, and/or a small set of people?

-Matt R

Hiya, the two top sections IPs and Countries work just fine. On the live traffic view it only records Valid usernames and doesn’t record the invalid ones.

It is mostly me who logs in, but there’s a few other people who do infrequently.

Any ideas?

Thanks for checking those. Do you have “Immediately lock out invalid usernames” enabled, on the Wordfence Options page?

When invalid usernames are immediately locked out, they are not currently logged. I think the dev team did this intentionally, since those logins are not a threat, so that you can see failed logins on valid accounts more easily. (The immediate lockout setting is still helpful though, so if the bot does try additional login names which are valid, they are already locked out.)

If you try logging in with a valid username, but use the wrong password, do you see it in the top failed login list? Before testing it, make sure your login settings aren’t so strict that you get locked out, of course!

-Matt R

Aha!

That is it, I did make the change to immediately lock out invalid usernames. I did it a while before I noticed the issue.

Yes, I have tested using the wrong password, and it does log it correctly. I think the immediate lockout setting has proved it’s worth, because I used to notice the attempt with wrong passwords.

Thanks for resolving this so quickly for me.

A suggestion/feature request would be that if this behaviour is by design then consider changing the message that is delivered in these circumstances from ‘ We’re collecting data, please check back soon. ‘ to ‘ Wordfence is working normally, there is no data to display – congratulations’ or something similar.

Thanks again

Great, thanks for following up. I have passed the feature request on to the dev team.

I can’t promise that every suggestion we get will make it into a release, or when that might be, but every suggestion we get is evaluated carefully and considered seriously. We value the input we get from our customers. Thank you for helping to make Wordfence great!

-Matt R
FB973

Hello chrisscottuk,
your feature request has been fixed in the latest version of Wordfence (6.1.8) which includes better messages for the admin dashboard Wordfence widget when there is no data to display.