Service Temporarily Unavailable

Hi @junyewgempakstarz,

I think some settings are accidentally locking you out.

Can I have you check these settings within Wordfence -> All Options?

– Immediately lock out invalid usernames
– Immediately block the IP of users who try to sign in as these usernames
– Prevent the use of passwords leaked in data breaches

Let me know the settings for those fields.

Can you also take a look within Wordfence -> Tools -> Live Traffic? From here, try to find where you were locked out, expand the row, and it should say why you were locked out.

Dave

Hi Dave,

Sure. Below are the settings:

Immediately lock out invalid usernames: Off
Immediately block the IP of users who try to sign in as these usernames: None
Prevent the use of passwords leaked in data breaches: On for admins only

I have checked the live traffic detail, and I can’t find any data regards of login and logouts, lockout and both blocked details yet. If I always uninstall and reinstall wordfence (The only temporary fix to continue login my site), did the plugin still be able to save the live traffic data where it had before uninstall?

Also, today seems fine, me and my colleagues able to login without error pop out. I didn’t do any extra settings. Is there precaution I need to monitor to find out the cause?

Thanks for your reply.

JY

Hi again,

So the settings don’t seem to conflict with your logins at all.

If you reinstall Wordfence, your live traffic will be retained (Assuming Delete all tables upon deactivation is disabled in All Options).

I think there might be another plugin conflicting with the login process. Can you let me know what your login form looks like? What plugin are you using for a custom login page? Most login pages do not use ajax.

Dave

Hi,

Thank for the detail on live traffic detail, I’ll monitor on this more often.

I found out the login page is created using userpro plugin. The login form is in a popup layout where the button (login/sign up) on the page upper right side pressed.

Hi again,

Is Wordfence still locking out users from the login page?

I took a look at how UserPro login works, and what I found was that requests were being sent via admin-ajax.php, and not wp-login.php.

What I am guessing is that multiple login requests are being clumped in as the same user. This would cause Wordfence to block people from logging in after different people failed to login.

I can recommend increasing Lock out after how many login failures, as you do have ReCaptcha enabled for your login form.

Please let me know if you see any users being locked out irregularly in the Live Traffic.

Dave

Hi,

It didn’t happen anymore since last comment. Live traffic didn’t show up any abnormal data too.

Now you mention it, there are a few accounts shared by multiple users, then highly this is the cause. Noted on wordfence block detail.

I have increased amount of ‘lock out after how many login failures’ and will continue monitor live traffic time to time.

Thanks for support, and will report if this bug occurs again.