• Resolved cgrignon

    (@cgrignon)


    Hi there, thanks for this plugin!

    I just have one question, maybe it’s a stupid question but rather be sure than sorry.

    In my log report I have a few entries of user logins that get flagged for different reasons.The user ids are user ids registered in our wordpress but “in real life” none of them are trying to connect at the time the logs are written. (I hope you understand what I mean)
    So my question is are those logs from bots/spam/hackers using our ids, or is it just the plugin warning that our wordpress legitimate users might be blocked if they try to connect?

    Thanks

    PS: We are using Cloudflare but haven’t restored original IPs yet, so my guess is, this is the reason for these logs. Hope you can help me clear this out.

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Anonymous User

    (@anonymized-5837566)

    Two things:

    1. Yes, spammers will absolutely figure out the usernames of legitimate existing users and try to create accounts with those usernames and/or try and brute force their logins. It’s important to make sure all your users are using secure passwords.

    2. It’s VERY important to restore your IPs:

    https://support.cloudflare.com/hc/en-us/sections/200805497-Restoring-Visitor-IPs

    If you’re not sure how to restore them, if you can describe your host/server setup, I can provide some guidance.

Viewing 1 replies (of 1 total)

The topic ‘Log report questions’ is closed to new replies.