One correct login and I also get the “Denied for Too Many Attempts”. This appeared to start after either Limit Login Attempts Reloaded and/or GoDaddy changed up configurations in November. Before early November, the plugin was basically invisible. While it was present in the dashboard, there was no way to delete it and it never annoyed with marketing messages. About a week ago I had to do some routine updates and content changes for the client and I was immediately locked out. There was also a new Captcha presented. After enteringd proper credentials and the new captcha, the WordFene 2FA request presented, once that was entered, I was locked out with the “Denied for two many attempts, please try again later”.
I run WordFence Premium on client sites. That plugin manages any login attempts and allows me to set 2FA up. WordFence has been working fine for several years, but all of a sudden “Limit Login Attempts Reloaded” has taken over. Even after seven hours of tech support from GoDaddy, the combination of this POS plugin and GoDaddy’s POS Business Managed WordPress hosting, are locking me out.
While I can log in via my client “Hub” (and others can login in via their GoDaddy account), doing so adds five steps.)
As if it can get worse, GoDaddy has installed a free version of this that annoys you with “Buy our Cloud version”. Also, even with the settings relaxed to kick in at 25 bad logins, this plugin still shuts you down (even if you enter proper credentials.)
For an addition fail, the plugin is ignoring settings that are suppose to whitelist a user name.
There also does not appear to be any way to clear history. Speaking of history, on this client’s site the last recorded lockout was on April 2021. According to GoDaddy support, you only get updated logs if you pay for the premium version.
Bad plugin and a really bad execution by GoDaddy.
Suggested move? Fire GoDaddy, then maybe this plugin is worthwhile as a one-trick pony.
-
This reply was modified 1 year, 11 months ago by Wudman. Reason: add detail