Attempted Logins

• 

  theempirestrategist · Member · Jun 13, 2016 at 7:14 pm

  • Copy link
  • Add topic to favorites

  I received an email from my WordPress that someone attempted logging in to my site 24 times yesterday and was locked out.
  ’24 failed login attempts (4 lockout(s)) from IP: 78.109.25.241′

  I’ve contacted everyone who has access to my login and no one attempted it yesterday (it was a Sunday). I’m afraid this is someone trying to hack my account. Is there a way to find out who was attempting to login? And if so, if there’s a way to block them? Luckily they weren’t able to gain access!

• 

  kokkieh · Staff · Jun 14, 2016 at 1:51 pm

  • Copy link

  Hi there,

  I don’t see any attempted logins for your account, and you don’t appear to have any site connected to this account. The last activity in your WordPress.com account was a year ago

  If you have a self-hosted WordPress site, that site is not on our servers so we have no logs for it and no control over its security settings. However, if you want to up your security I can recommend the Jetpack and VaultPress plugins, which will give your self-hosted site the same kind of security included on all WordPress.com sites.

  Let me know if you have any questions.

• 

  theempirestrategist · Member · Jun 14, 2016 at 2:41 pm

  • Copy link

  Hi,

  Sorry – it’s actually for a client’s website: http://www.alyssanobriga.com/

  I’ve installed WP-Ban and added in the IP addresses that had multiple attempts. However, it’s still happening and the IP address changes frequently.

  Any other ideas?

• 

  kokkieh · Staff · Jun 14, 2016 at 5:11 pm

  • Copy link

  That site is also not a WordPress.com site, so we don’t have any data about it. We can only help you with sites hosted by WordPress.com, not WordPress sites hosted elsewhere.

  The hosting provider for that site might be able to give you information on this, so I suggest you try contacting them. Based on the Whois information for the domain, that would be GoDaddy.