125 failed log-in attempts in one evening – that I did not make

  • Unknown's avatar
    ns0706 · Member ·

    I’m getting mails from WordPress every couple of minutes about a failed login attempt. IP’s keep changing. Most show attempts by my own profile, but the last four have come from “admin” and “winonagary4458”
    I have no idea what is going on
    Could somebody please help?
    http://tobetterlives.com

    The blog I need help with is: (visible only to logged in users)

  • avydun · Staff ·

    If you are talking about this particular site http://tobetterlives.com/ note that it’s a self-hosted WordPress (WordPress.org) site and not a WordPress.com site.

    The current community forums we are on is meant for questions related to WordPress.com account and WordPress.com sites.

    For ensuring security of your self-hosted WordPress (WordPress.org) site, you should post this topic on self-hosted WordPress (WordPress.org) community forums: https://wordpress.org/support/

    I hope this helps clarify things.

  • kokkieh · Staff ·

    Hi there,

    It sounds like someone might be trying to brute-force their way into your site, but that’s exactly what the Jetpack plugin’s security features protect against. To be safe, I’d make sure to update the admin password on your site, and also your WordPress.com account password, and consider enabling Jetpack’s Single Sign-On feature under My Site ->Settings ->Security so it’s only possible to access your site’s dashboard if logged into your WordPress.com account. Then enable two-factor authentication on your WordPress.com account as an additional security measure.

    Enable Two-Step Authentication

    I see you’ve already submitted tickets to Jetpack support as well. Please be pateint while waiting for a reply from them, as they’re in the best position to advise you further on this.

  • Unknown's avatar
    ns0706 · Member ·

    Thank you Kokkieh. I can’t be sure if it’s because of someone hacking or because my two WordPress blog profiles have gotten mixed up. WordPress/Jetpack stopped detecting my site (the other one is working fine) and I’ve tried to remove the offending profile, but the mails keep coming. Interestingly both sites work fine in the Orion ManageWP dashboard that I added.
    Yes I suppose I will just have to wait for Jetpack to get back.
    Thanks for responding.

  • kokkieh · Staff ·

    If Jetpack is not seeing your site then their support is best to help you from here, yes. Hopefully it won’t be too long before you receive a reply from them.

  • The topic ‘125 failed log-in attempts in one evening – that I did not make’ is closed to new replies.