• zapappa

    (@lesarnott)


    Invalid logins are being blocked ok but the quick login attempt repetitions do not appear to be trapped. Here’s what I see in the Visitors logs with 7 login attempts in the same minute from the same IP address. Should this sequence trigger a lockout? I’m running WP Super Cache. Could that be an issue?

    Visitors Log
    3/1/20, 1:48 PM 157.230.227.105 /wp-login.php
    3/1/20, 1:48 PM 157.230.227.105 /wp-login.php
    3/1/20, 1:48 PM 157.230.227.105 /wp-login.php
    3/1/20, 1:48 PM 157.230.227.105 /wp-login.php
    3/1/20, 1:48 PM 157.230.227.105 /wp-login.php
    3/1/20, 1:48 PM 157.230.227.105 /wp-login.php
    3/1/20, 1:48 PM 157.230.227.105 /wp-login.php

    Settings
    Max Retries 3
    Maximum failed attempts allowed before lockout
    Lockout Time 15 minutes
    Max Lockouts 5

    Extend Lockout 24 hours.
    Extend Lockout time after Max Lockouts
    Reset Retries 24 hours
    Email Notification after 5 lockouts

    • This topic was modified 5 years ago by zapappa.
    • This topic was modified 5 years ago by zapappa.
Viewing 1 replies (of 1 total)
  • Plugin Contributor loginizer

    (@loginizer)

    Hi,

    Yes, I guess this could be because of the cache.
    Could you try to disable the cache for a few minutes and see ?

    Regards

Viewing 1 replies (of 1 total)
  • The topic ‘7 quick logins’ is closed to new replies.