Error identifying IP Address

Hi,

After 60 minutes I was able to access the admin area of my website and I figure out that the plugin is producing a wrong IP address, for each login attempt. In other words, the same IP address is identified for any login attempt, whether legitimate or illegitimate. So, that’s the reason why the website it’s blocking any IPs (including mine)

This is probably happening because you have the following feature Enable Login Lockdown Feature enabled. And you have set up the Time Length of Lockout (min) feature to 60 minutes. This is located in WP Security -> User Login -> Login Lockdown.

Let me know if the above is correct.

Thank you

Hello,

Of course you are correct. By my question is why the plugin is identifying all login attempts with the same IP address, blocking all kind of attempts.

Regards.

Hi,

By my question is why the plugin is identifying all login attempts with the same IP address, blocking all kind of attempts.

Do you also have the following feature Instantly Lockout Invalid Usernames enabled? Are you using any other security plugin apart from ours? Did this issue happen once or is it happening regularly? Is it happening when you try to login or simply when visiting your site?

Regards

• This reply was modified 5 years, 10 months ago by mbrsolution.

Hi MBR,

Answers:
– Instantly Lockout Invalid Usernames it is not enabled;
– No, just using WP Security;
– The problem started on friday, but now is still occurring. As the website is receiving brute force attacks all the time, due this problem the WP Admin area is almost inaccessible (blocked most of time);
– Just affecting WP Admin page.

Thanks again!

Hi,

– The problem started on friday, but now is still occurring. As the website is receiving brute force attacks all the time, due this problem the WP Admin area is almost inaccessible (blocked most of time);

Do you know what changed in your site or server prior to this issue?

Do you have any of the following features enabled:

Brute Force:
Enable Rename Login Page Feature:

Firewall:
Completely Block Access To XMLRPC:
Disable Pingback Functionality From XMLRPC:

Regards

MBR,

Nothing new on server.

Brute Force:
Enable Rename Login Page Feature:
– I’ve tried to activate, but the “new” admin page was not loading on the new address. So, not enabled.

Firewall:
Completely Block Access To XMLRPC:
Disable Pingback Functionality From XMLRPC:
– Both not enabled.

Additional info: all the logins (successful / unsuccessful) are identified under the IP 10.17.76.17.

Regards

Hi,

Brute Force:
Enable Rename Login Page Feature:
– I’ve tried to activate, but the “new” admin page was not loading on the new address. So, not enabled.

Are you saying that your IP address is blocked?

Firewall:
Completely Block Access To XMLRPC:
Disable Pingback Functionality From XMLRPC:
– Both not enabled.

Can you enable one of the above, preferably Completely Block Access To XMLRPC: if you are not accessing remotely into your site by other means. Please read the instructions first before you enable this feature.

Thank you