ip-block "admin" does not work

Hi,

Under options, how long to you have “Amount of time a user is locked out” set to? The locks could be expiring. Also, the lock is per IP address. Multiple attackers could be trying to use “admin” from different IP addresses. You’d see multiple locks from this.

Hope that helps,
Brian

Hi WFBrian,

thank you for your answer.

It is not a problem of “time”. Despite using the “username-Block”-Feature I still see multiple login attempts (in Live Traffic –> Login/logouts) under a single IP-Adress (till the block after X Login-Attempts takes effect).

So there must be another reason. Any other idea?

THX

PS: “Amount of time a user is locked out” is 1 day

@thibor:

Are you using any other captcha or security plugins? Captcha plugins often change the error response from WordPress to their own message, instead of letting WordPress’s “invalid user” response come through like it normally would, which can cause this problem.

-Matt R

Hi Matt,

yes I′m using “Captcha by BestWebSoft” … but only for the registration-page. Is there any solution for this problem? Unfortunately, not using captcha is no solution for me.

Many Thanks!

Right now, that feature isn’t compatible with captcha plugins that work that way, and I don’t know of a workaround. The “Immediately lock out invalid usernames” options also may not work correctly with that type of captcha, but login security options that don’t depend on the status of a particular username should still work with it.

The other plugin author may know of a workaround, or may be willing to change the plugin’s operation so it does not change the WordPress error internally. We’ll keep an eye on this issue, and also may work on compatibility in a future version.

Thanks!

-Matt R

Thank You!