Valid users getting locked out

  • Resolved paulo.marques77

    (@paulomarques77)


    8 years, 9 months ago

    Hi,

    I got two websites that uses both Wordfence and Login With Ajax plugin, and from a few weeks from now, a lot of users were getting their IPs locked out from login.

    The limit is set to 3 attempts, but when I check the list of locket out users, it shows way more than 3, sometimes it gets to 90 attempts more or less.

    This makes me think that there is somekind of loop or repeated requests made when someone is trying to login. The problem is that I couldn’t reproduce this error, but it’s happening with a lot of users.

    I couldn’t find any threads related to this that gave me answers, so I’m posting this new one to see if someone could help me.

    https://www.ads-software.com/plugins/wordfence/

Viewing 1 replies (of 1 total)
  • Plugin Author WFMattR

    (@wfmattr)

    Hi,

    It does sound like it could be a loop (I haven’t used that plugin before, so I’m not sure of the details on how it processes logins), but might also be issues with a proxy.

    If you’ve seen the IPs of visitors who were locked out, you could check the site’s “access log” file, to see what URLs were being reached, which might help narrow down the cause.

    Also, if you view the Live Traffic page on the Wordfence menu, make sure that visitors’ real IPs are appearing. If your host uses a reverse proxy like Varnish (or sometimes nginx), or if you use CloudFlare, you may need to change the option “How does Wordfence get IPs” to make visitors IP addresses come through correctly.

    -Matt R

Viewing 1 replies (of 1 total)
  • The topic ‘Valid users getting locked out’ is closed to new replies.