Settings Page (Active Lockouts) Not Working (No Display)

Update:

We investigated this further and noticed our “Lockout Period” is set to 15 minutes (as recommended by iThemes). Click here: https://prntscr.com/qxg0ik

So, it appears we visited our iThemes Settings page (to view lockouts) soon after the lockout period ended, ergo, no “Active Lockouts” were displayed.

Based on the above, would like to recommend that iThemes retain all “lockouts” (offending IPs) indefinitely until logs are cleared. That is, make sure they are not deleted after the “Lockout Period” expires.

Thank you!

• This reply was modified 5 years, 1 month ago by jetxpert.

When a lockout expires (by default after 15 minutes) it’s not deleted.

Lockouts “live” in the wp_itsec_lockouts table in the database. One of the table columns is ‘lockout_active’. When a lockout is active the ‘lockout_active’ value is 1 (default). After expiration the value is set to 0. But the lockout record still exists…

This is required to keep track of the # of lockouts (by default 3 within 7 days) that will lead to a ban (IP).

When properly configured the plugin also creates a (daily) WP cron task named purge-lockouts. It will delete any lockout records older than the value specified for the Blacklist Lookback Period setting (in the Global Settings module) + 1.

So if you want lockout records to live forever (or until logs are cleared) simply delete the purge-lockouts cron task.

To prevent any confusion, I’m not iThemes.

@nlpro,

Thank you. Where can we find the purge-lockouts cron task (path/folder/file)?

Cheers!

• This reply was modified 5 years, 1 month ago by jetxpert.