• Resolved barkins

    (@barkins)


    I recently started receiving about 15 or so email notices stating that IPs have been blocked from logging into the website by trying to use a username that doesn’t exist.

    Looking at the Live Traffic feed, those attempts were being made 2 days ago, but I’m only today receiving those notices.

    Is this normal? Thanks

    https://www.ads-software.com/plugins/wordfence/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author WFMattR

    (@wfmattr)

    It is not normal, but it is probably a problem on your host’s email server. Web servers generally wouldn’t let a WordPress/Wordfence process run for very long (many hosts limit them to 30-60 seconds), but mail servers can sometimes hold a queue for 4 days or more when there are problems, without failing completely.

    If you check with your host, they may already know what happened. It often helps if you can forward a copy of the email as an attachment, so they can see the full headers (this isn’t always possible in modern webmail though.)

    Thread Starter barkins

    (@barkins)

    Got it. So it’s safe to assume whatever is showing up in the Wordfence log is up to date and accurate? Thanks

    Plugin Author WFMattR

    (@wfmattr)

    Yep, the Wordfence Live Traffic logs should be up to date when you view them — new traffic and blocked IPs usually should show up within a couple seconds of when they happen, depending on your settings. (You can set longer delays on slow hosts, but most people have the default of 2 seconds.)

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘"User locked out from signing in" Delay Issue’ is closed to new replies.