New to the community? Start here

Getting a lot of reports for “User login failed”

Even with Masked Login Area active on my site, in the Audit logging I’m getting a lot of “User login failed. Username: username”

Mon, 9 Dec 2019 0:06:05
More Defender Pro discussions
Defender Pro
  • Nastia
    • Ex Staff

    Hello Douglas

    I trust you’re doing well!

    The automated attacks are usually made by bots, and they can also crawl for links based on a dictionary for common login slugs.

    Current Masked Logn URL that is set on your site it is very common and largely used, please consider changing it to more complex login URI.

    To protect your site from these types of attacks, please consider enabling Two Factor Authentication for administrators and enabling “Force users to log in with two-factor authentication”. This option can be found from Defender > Advanced Tools > Two Factor Auth.

    As, well, please always uninstall and remove any unnecessary plugins, themes and any other components and files which are not being used.

    Please let us know if you will have any further quetions!

    Kind regards,
    Nastia