Keep getting old emails on user locked out

  • Resolved Saikoh

    (@saikoh)


    3 years, 5 months ago

    Hi all,

    I have a question about an annoying little issue with Wordfence. So last week i got blasted by login scripts, which were nicely blocked. However, i did receive like 300 emails of login attemps and users locked out from signing in.
    As that was a bit much, i edited the email alerts to prevent that from happening again.
    So the option to alert me in this case is turned off. However i still keep getting emails from June 25 which are being send over and over again. Every day i receiver hundreds of emails about the users locked out from days ago. Every day, the same emails, the same time, etc. How do i stop this? What is causing this? After changing the settings, i cleared the website’s cache.

    Any tips?

    Thanks!

Viewing 1 replies (of 1 total)

  • That sounds like it could be a problem where your email service is having issues. This isn’t like regular emails you send and receive, but rather server alert messages. A restart of postfix or sendmail (whichever is installed) might fix it. It could also be that so many attempts came through that the email software queued the alert emails up and has been trying to get through them. Your hosting provider may need to help with this but it might be a case where you have to let them run their course.

    Email alerts are important to let you know about your site’s security but I completely understand that getting too many can make you miss the important ones, kind of like not being able to see the proverbial tree because of the forest. There are a few I uncheck on sites I have managed. I turn off these because essentially they are Wordfence telling you it is doing it’s job. That’s handy for new users but seasoned webmasters might not need to see them.
    Alert when an IP address is blocked
    Alert when someone is locked out from login
    Alert when the “lost password” form is used for a valid user

    I don’t need to know when I logged into my own site so I used to uncheck Alert me when someone with administrator access signs in but now we added the sub-option to Only alert me when that administrator signs in from a new device or location so I check them both. If I suddenly login from a country halfway around the globe I most certainly want to know.

    I hope this helps.

    Tim

Viewing 1 replies (of 1 total)
  • The topic ‘Keep getting old emails on user locked out’ is closed to new replies.