• Resolved eric-vice

    (@eric-vice)


    Hi,
    I have restricted access to wp-login.php to my IP address in .htaccess on my websites for several years (and it’s working, I did test from geopeeker.com and there is no access allowed to this url).
    Last two days I’m getting emails “User locked out from signing in” with US and EU IP addresses.
    How is this possible, is there any other way how bots can login to wordpress?

    When I check website’s wordfence live traffic there is no evidence of this IP, that’s strange to me.

    • This topic was modified 3 years, 12 months ago by eric-vice.
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support WFAdam

    (@wfadam)

    Hello @eric-vice and thanks for reaching out to us!

    Are the email alerts the Wordfence alerts or your hosting? Do these alerts mention which user is being logged in?

    If you don’t see them in your Live Traffic, how about in your Firewall > Blocking page? You can filter by “lockout” to see. Does your site have a large userbase or is it just your account?

    Thanks!

    Thread Starter eric-vice

    (@eric-vice)

    It’s email from wordfence “User locked out from signing in” and I don’t have any other user accounts, only mine.
    Login attempt was with non exist username and have been blocked (as is stated in email notification).

    In Firewall > Blocking page it says “No blocks are currently active.”

    I have no idea why emails are being sent (from Wordfence), but in “live traffic” or “Firewall > Blocking” there is no mention about it.

    Plugin Support WFAdam

    (@wfadam)

    I have seen similar email alert issues in the past. Lets try to go into Wordfence > All Options > Email Alert Preferences and disable everything in this section, then save. Now go back through and enable the settings you want and save again.

    This sometimes resets the table used for sending out these alerts.

    Let me know if you see any more alerts like that after you save that.

    Thanks!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘“User locked out from signing in” email’ is closed to new replies.