WordPress ? Support ? How-To and Troubleshooting Is this lockout notification

  • Resolved manythings

    (@manythings)


    9 years, 8 months ago

    This is disturbing because the locked out username is my own, a secondary ‘test’ account that I set up purely for learning Worpress stuff (with its own separate Gmail account) and AFAIK the name doesn’t appear publicly anywhere online. I use it for things like figuring out how author accounts work but I never actually make posts etc. using it (I just delete them.)

    – The return address on the notification is my own main email address, same as the address it was sent to. Shouldn’t it be something like [email protected]? In 20 years of auto-notifications I’ve never seen one where the sender shows up as yourself.

    – In the full message header the only email address is my own (again – not the test account), and some other one at my web host

    – under Dashboard > WP Security > Locked IP Addresses it says “There are no IP addresses currently locked out” – which completely contradicts the email.

    v 3.8.9

    ———————————————–

    A lockdown event has occurred due to too many failed login attempts or invalid username:
    Username: [here it has my ‘test’ username discussed above]

    IP Address: 103.27.127.238
    IP Range: 103.27.127.*

    Log into your site’s WordPress administration panel to see the duration of the lockout or to unlock the user.
    https://www.ads-software.com/plugins/all-in-one-wp-security-and-firewall/

Viewing 12 replies - 1 through 12 (of 12 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi manythings, do you have any other security plugins installed?

    Plugin Contributor wpsolutions

    (@wpsolutions)

    under Dashboard > WP Security > Locked IP Addresses it says “There are no IP addresses currently locked out” – which completely contradicts the email

    It depends how small your Time Length of Lockout value is. If this time had already passed then that would explain why there were no currently locked out IP addresses when you checked that page.

    Thread Starter manythings

    (@manythings)

    My plugins are:

    Email subscription
    Subscribe Button by AddToAny
    WordPress Importer
    WP Statistics
    WP Super Cache

    Akismet but it is not activated. I don’t know why. I never would have deactivated it unless some specifically said I had to because it there was something wrong with it or it conflicted with something more important.

    Thread Starter manythings

    (@manythings)

    It depends how small your Time Length of Lockout value is.

    Where is that? Not under settings where it should be so I went through everything else but couldn’t find it. Obviously it must be in there somewhere.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    @manythings go to WP Security -> User Login -> Login Lockdown.

    Thread Starter manythings

    (@manythings)

    Great, thanks.

    These are my current values. Shouldn’t I make them a lot stricter (fewer attempts, longer time period)? No one else is ever going to need to log in to my blog. I should probably just disable user accounts altogether if that’s possible, apart from my own. I don’t even know what they’re for – running a blog with multiple authors? I won’t ever be doing that.

    Max login attempts: 20
    Login retry time period: 10 min

    Plugin Contributor wpsolutions

    (@wpsolutions)

    Hi,
    I was referring to Time Length of Lockout which is not one of the fields you are referring to.

    Thread Starter manythings

    (@manythings)

    Got it, thanks – I understood your original post about Time Length of Lockout. I was branching out to related questions about other lockdown options and user accounts. Sorry if that wasn’t clear. If necessary I can put those into a new thread.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    @manythings is your issue now resolved? If it is can you mark this support thread as resolved.

    You can start a new support thread regarding your other questions.

    Regards

    Thread Starter manythings

    (@manythings)

    No it has not been resolved. See the question in the very first line – no one has mentioned it, much less answered it.

    However I realized just this second that the thread title and body text got hopelessly garbled (parts missing and cut off) when I copy-and-pasted it from the main www.ads-software.com How-To forum, where I originally posted it and a responder said it belonged here.

    So, because this forum doesn’t allow edits, unlike all other forum sites on the planet, I am going to start a new thread and while I’m at it I will reword the whole post for clarity.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    That would be a great idea. Once you start a new support thread with the correct information, can you mark this support thread as resolved.

    Thank you

    Thread Starter manythings

    (@manythings)

    feel free to delete this thread if that is possible.

Viewing 12 replies - 1 through 12 (of 12 total)
  • The topic ‘WordPress ? Support ? How-To and Troubleshooting Is this lockout notification’ is closed to new replies.