Title: [Plugin: Login Security Solution] ip is incomplete Last modified: August 20, 2016 --- # [Plugin: Login Security Solution] ip is incomplete * Resolved [janmalagucute](https://wordpress.org/support/users/janmalagucute/) * (@janmalagucute) * [13 years, 9 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-ip-is-incomplete/) * Hi, * it seems my site is getting attacked. I am receiving email notification of failed attempt * my problem is the IP is incomplete. It is missing the last octet and I can’t block the IP * ====email copy===== Component Count Value from Current Attempt ———————— —– ——————————– Network IP 0 208.91.199 Username 0 root Password MD5 0 4072f365e6d7673a1ea5478d49dfbe1e * The Login Security Solution plugin for WordPress is repelling the attack by making their login failures take a very long time. ============== the ip has 3 octet only. it should have 4 right? * thanks * [http://wordpress.org/extend/plugins/login-security-solution/](http://wordpress.org/extend/plugins/login-security-solution/) Viewing 6 replies - 1 through 6 (of 6 total) * Plugin Author [Daniel Convissor](https://wordpress.org/support/users/convissor/) * (@convissor) * [13 years, 9 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-ip-is-incomplete/#post-2993931) * Hi Jan: * That’s the network component of the IP address, which is what’s used for counting the failures. The full address is in the `login_security_solution_fail` table. * I’m curious, which version of the plugin were you using when that email was sent, please? * Thanks, * –Dan * Thread Starter [janmalagucute](https://wordpress.org/support/users/janmalagucute/) * (@janmalagucute) * [13 years, 9 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-ip-is-incomplete/#post-2993938) * I am using the latest version * I went to the table and I saw the logs. I am curious why the suspected attacker is able to use my username even though i am using a username that is not common. * in the table there are attempts of using usernames as root, admin, webmaster and suprisingly, it also have entries of failed attempt using my real username. * Does it imply the attacker is somehow gaining access to some data? * Thanks * Plugin Author [Daniel Convissor](https://wordpress.org/support/users/convissor/) * (@convissor) * [13 years, 9 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-ip-is-incomplete/#post-2993979) * Hi Jan: * By latest version, you mean 0.23.0? Hmm, and it’s still sending the emails with 0 counts. Alas. * The failures with your user name could be due to auth cookies? Did you change your password? Are you using multiple browsers? Do the times match the times you were looking at the site. * Or the attacker deduced your user name from the site name or the user name on your postings. * –Dan * Thread Starter [janmalagucute](https://wordpress.org/support/users/janmalagucute/) * (@janmalagucute) * [13 years, 9 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-ip-is-incomplete/#post-2993985) * Yes that is my version. But that log may have been log before i upgrade to latest version. I randomly choose it from the table. * I changed my password because I was locked down. The log said there was a successful intrusion that is why the username password reset is required. When i check the logs, the IP of the alleged intruder was my IP. * But the real suspected attacker IP has several logs using my real username. * Yes I am using multiple browser to test my website. * I am not posting using my wp owner/admin account * By the way. I am starting to appreciate your plugin. it seems that there are many intrusion attempt I was missing before. * Thanks * [jbd7](https://wordpress.org/support/users/jbd7/) * (@jbd7) * [13 years, 7 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-ip-is-incomplete/#post-2994035) * Hi Dan and Jan, * Thanks for the plugin. I experience the first attack today, with the version 0.34.0. I received a notice of attack, but without the last octet of the IP. Is it possible in a next release to show the full IP? * Like Jan I was surprised my username had been found with no display in comments or elsewhere, and no obvious quoting in the site. * [MickeyRoush](https://wordpress.org/support/users/mickeyroush/) * (@mickeyroush) * [13 years, 7 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-ip-is-incomplete/#post-2994036) * It’s fairly easy to guess an administrator’s username. It’s usually the author name. Here are a couple of ways they can guess at it. * Using their browser they could do the following (where example.com is your domain). * example.com/author/ * That above could reveal any posts that were created by any authors of the site. * Or they could try this: * example.com/?author=1 example.com/?author=2 example.com/?author=3 * and so on. * More than likely a lower number is the username of an admin. Viewing 6 replies - 1 through 6 (of 6 total) The topic ‘[Plugin: Login Security Solution] ip is incomplete’ is closed to new replies. * ![](https://s.w.org/plugins/geopattern-icon/login-security-solution.svg) * [Login Security Solution](https://wordpress.org/plugins/login-security-solution/) * [Frequently Asked Questions](https://wordpress.org/plugins/login-security-solution/#faq) * [Support Threads](https://wordpress.org/support/plugin/login-security-solution/) * [Active Topics](https://wordpress.org/support/plugin/login-security-solution/active/) * [Unresolved Topics](https://wordpress.org/support/plugin/login-security-solution/unresolved/) * [Reviews](https://wordpress.org/support/plugin/login-security-solution/reviews/) * 6 replies * 4 participants * Last reply from: [MickeyRoush](https://wordpress.org/support/users/mickeyroush/) * Last activity: [13 years, 7 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-ip-is-incomplete/#post-2994036) * Status: resolved