I'm using WordFence for site monitoring and overall security. I'm seeing some failed login attempts from a couple of different locations with username "admin" and "companyname". I'm not familiar with the IP addresses or who they belong to.

My question is, would this prompt you to block the IP addresses? Also, should I consider blocking the login page from all IP address except for ones that are approved?


I didn't test it but I think you could use this plugin https://wordpress.org/plugins/wp-ban/

that should solve these issues

  • I can actually ban IP addresses with Wordfence or at the server level. I'm also wondering if it might be better to ban at the server level rather than just Wordfence? – brandozz Mar 12 '15 at 13:54
  • server level ip blocking is always better – seot Mar 12 '15 at 13:59
  • Would this type of behavior prompt you to block the IP address? – brandozz Mar 12 '15 at 14:04
  • no yo ushould do this manually. – seot Mar 12 '15 at 14:06
  • Yes, I don't want to rely on a plugin to automatically block IP addresses. That is too risky. – brandozz Mar 12 '15 at 14:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.