Title: [Plugin: Login Security Solution] Seeing pointless notifications during attack Last modified: August 20, 2016 --- # [Plugin: Login Security Solution] Seeing pointless notifications during attack * Resolved [Dean Taylor](https://wordpress.org/support/users/deanmarktaylor/) * (@deanmarktaylor) * [13 years, 8 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-seeing-pointless-notifications-during-attack/) * Hi Dan, * I’m seeing the following problems / bugs: 1. Pointless notifications during an attack 2. The **delay** this plugin is supposed to introduce to the ability for an attacker does not work. * I am using version `0.24.0`. * All of the following notifications were sent regarding attempts on the “admin” account (which does not exist). * Please note that my `login_fail_notify` (“Failure Notification”) setting was set to the previous default of `20` not `50`. * ``` Your website, ****************, is undergoing a brute force attack. There have been at least 480 failed attempts to log in during the past 120 minutes that used one or more of the following components: Component Count Value from Current Attempt ------------------------ ----- -------------------------------- Network IP 480 173.254.28 Username 480 admin ``` * Note the “**480 failed attempts** to log in during the past **120 minutes**“, the same in each email. * The next line is then this: * ``` Password MD5 1 81befxxxxxxxxxxxxxxxxxxxxx ``` * Where `81befxxxxxxxxxxxxxxxxxxxxx` is replaced with a different value each time. * There were **42 emails** in total sent in a period of approximately **10 minutes and 15 seconds**. * **There was approximately 15 seconds between each notification email.** * For your reference here are the times and differences as taken from the email headers: * ``` 08:02:24 08:02:39 00:00:15 08:02:54 00:00:15 08:03:09 00:00:15 08:03:24 00:00:15 08:03:39 00:00:15 08:03:54 00:00:15 08:04:09 00:00:15 08:04:24 00:00:15 08:04:39 00:00:15 08:04:55 00:00:16 08:05:09 00:00:14 08:05:24 00:00:15 08:05:39 00:00:15 08:05:54 00:00:15 08:06:09 00:00:15 08:06:24 00:00:15 08:06:39 00:00:15 08:06:54 00:00:15 08:07:09 00:00:15 08:07:24 00:00:15 08:07:39 00:00:15 08:07:54 00:00:15 08:08:09 00:00:15 08:08:24 00:00:15 08:08:39 00:00:15 08:08:54 00:00:15 08:09:09 00:00:15 08:09:24 00:00:15 08:09:39 00:00:15 08:09:54 00:00:15 08:10:09 00:00:15 08:10:24 00:00:15 08:10:39 00:00:15 08:10:54 00:00:15 08:11:09 00:00:15 08:11:24 00:00:15 08:11:39 00:00:15 08:11:54 00:00:15 08:12:09 00:00:15 08:12:24 00:00:15 08:12:39 00:00:15 ``` * I will send to you via e-mail a export of the `wp_login_security_solution_fail` table to help in your diagnosis. * Thanks for your support Dan! * Cheers, Dean. * [http://wordpress.org/extend/plugins/login-security-solution/](http://wordpress.org/extend/plugins/login-security-solution/) Viewing 5 replies - 1 through 5 (of 5 total) * Plugin Author [Daniel Convissor](https://wordpress.org/support/users/convissor/) * (@convissor) * [13 years, 8 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-seeing-pointless-notifications-during-attack/#post-3025475) * For the record here, I’ve been working with Dean on this via back channels. So far, my test “attacks” on his site have been unable to reproduce the problem. * Thread Starter [Dean Taylor](https://wordpress.org/support/users/deanmarktaylor/) * (@deanmarktaylor) * [13 years, 8 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-seeing-pointless-notifications-during-attack/#post-3025476) * I can confirm Daniel’s active work in attempting to reproduce the issue. * Dan: Thank you for your continued support. * Plugin Author [Daniel Convissor](https://wordpress.org/support/users/convissor/) * (@convissor) * [13 years, 8 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-seeing-pointless-notifications-during-attack/#post-3025494) * Hi Dean: * Have you been able to reproduce the problem by “attacking” your site with the Bash script I sent? * –Dan * Thread Starter [Dean Taylor](https://wordpress.org/support/users/deanmarktaylor/) * (@deanmarktaylor) * [13 years, 8 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-seeing-pointless-notifications-during-attack/#post-3025496) * Hi Dan: * Sadly work load hasn’t provided me with any time to work with it. * Dean. * Plugin Author [Daniel Convissor](https://wordpress.org/support/users/convissor/) * (@convissor) * [13 years, 8 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-seeing-pointless-notifications-during-attack/#post-3025497) * Okay. I sincerely think the odd behavior here is a fluke by the server. I’ll close this for now. If you’re able to reproduce it, please reopen this thread with more details. Viewing 5 replies - 1 through 5 (of 5 total) The topic ‘[Plugin: Login Security Solution] Seeing pointless notifications during attack’ is closed to new replies. * ![](https://s.w.org/plugins/geopattern-icon/login-security-solution.svg) * [Login Security Solution](https://wordpress.org/plugins/login-security-solution/) * [Frequently Asked Questions](https://wordpress.org/plugins/login-security-solution/#faq) * [Support Threads](https://wordpress.org/support/plugin/login-security-solution/) * [Active Topics](https://wordpress.org/support/plugin/login-security-solution/active/) * [Unresolved Topics](https://wordpress.org/support/plugin/login-security-solution/unresolved/) * [Reviews](https://wordpress.org/support/plugin/login-security-solution/reviews/) ## Tags * [attack](https://wordpress.org/support/topic-tag/attack/) * [email](https://wordpress.org/support/topic-tag/email/) * 5 replies * 2 participants * Last reply from: [Daniel Convissor](https://wordpress.org/support/users/convissor/) * Last activity: [13 years, 8 months ago](https://wordpress.org/support/topic/plugin-login-security-solution-seeing-pointless-notifications-during-attack/#post-3025497) * Status: resolved