I'm using WordFence for site monitoring and overall security. I'm seeing some failed login attempts from a couple of different locations with username "admin" and "companyname". I'm not familiar with the IP addresses or who they belong to.

My question is, would this prompt you to block the IP addresses? Also, should I consider blocking the login page from all IP address except for ones that are approved?

1 Answer 1


I didn't test it but I think you could use this plugin https://wordpress.org/plugins/wp-ban/

that should solve these issues

  • I can actually ban IP addresses with Wordfence or at the server level. I'm also wondering if it might be better to ban at the server level rather than just Wordfence?
    – brandozz
    Mar 12, 2015 at 13:54
  • server level ip blocking is always better
    – seot
    Mar 12, 2015 at 13:59
  • Would this type of behavior prompt you to block the IP address?
    – brandozz
    Mar 12, 2015 at 14:04
  • no yo ushould do this manually.
    – seot
    Mar 12, 2015 at 14:06
  • Yes, I don't want to rely on a plugin to automatically block IP addresses. That is too risky.
    – brandozz
    Mar 12, 2015 at 14:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.