• Resolved max2232

    (@max2232)


    Hello,

    I use the “Limit Login Attempts” functionality (with a limit number of 3) of the plugin to prevent brute force attacks. However, in the “Blocked” tab of the “Activity Log” panel, I have never seen any entry corresponding to currently automatically blocked IP addresses (while I have several access attempts to wp-login.php in my logs).

    So, I did several tests with always the same result: While the plugin successfully blocks my IP address after wrong login attempts, no corresponding entry is visible in the “Blocked” tab of Activity log.

    According to SiteGround tutorial (https://www.siteground.com/tutorials/wordpress/sg-security/login-security/), it should be listed in this blocked tab :

    Limit Login Attempts
    Sets a limit to the number of times a given user can attempt to log in to your wp-admin with incorrect credentials. Once the login attempt limit is reached, the IP from which the attempts have originated will be blocked from accessing your login page for 1 hour and will be added in the Blocked tab of the Activity Log page. …
    You can manually remove the block at any point in the Activity Log page > Blocked tab > the context menu in Actions next to the IP you wish to unblock.”

    Could you clarify this point ? Thanks in advance.

    Maxime

Viewing 1 replies (of 1 total)
  • Plugin Author Ignat Georgiev

    (@ignatggeorgiev)

    Hello @max2232,

    Thank you for reporting this. The Limit Login Attempts functionality works separately from the Activity Log Blocking functionality, as the Activity Log Blocking functionality has no set time for the blocked IP – while Limit Login Attempts locks the user out for a certain period of time.

    You can currently check which users have been blocked by checking your Acitvity Log and navigating to the wp-login.php visitors and find the ones that have a 403 error code served to them.

    If you would like to wipe-out the currently blocked users – you can change the number of times a given user can attempt to log in and revert it – this should let the IP that has been blocked to try logging in again.

    We will be adding the blocked IPs from the Limit Login Attempts in the Blocked tab of the Activity Log page in the future, so that we can show more information there.

    Kind Regards,
    Ignat

Viewing 1 replies (of 1 total)
  • The topic ‘Automatically blocked IP not shown in Blocked tab of Activity Log’ is closed to new replies.