Locked out while working on the site

Hi!

First off all, open Activity tab and check activities for strange actions with your login. For instance, your login was used to log in while you have already logged in and doing something in the Dashboard.
Second. Did you receive notification letters to the admin’s email?

Thank you for the quick response. I just got access back to the site ??

I didn’t got an email nor where there any strange actions with my login. All logins where just done by me and and no other login attempts are reported. It is just saying that the subnet has been blocked.

It seems that it was unsuccessful attempts to log in to the site from YOUR subnet. Due to specified limit on retries was reached, your subnet was blocked. That didn’t allow you to log in again.
P.S. YOUR subnet means computer subnetwork which your computer is connected to (and IP belongs to).

Do you have an idea what could cause this?

I think, that was someone who has computer in your subnet and who tried to log in to the site several times and eventually reached specified limit.
Also, probably, your computer is behind a proxy, and that was someone who also has a computer behind the same proxy.

Hi Gioni, it might be but I am not sure if this is the reason. There are no other login attempts recorded other than mine and it was just one. from my side.

Hi woo-do!

Situation from the your first post happened only once or that is happening periodically?

It happened two or three times the last weeks. Always when the site was opened in Chrome.

I agree, that’s weird. Maybe you have some extra extension is installed in Chrome? Like an XML-RPC client/editor which is trying to interact with your site in the background mode.
By the way, do you use some proxy?

Not really, just the MOZ Bar extension. We don’t use a proxy.

I have no idea what’s going on with your Chrome. Could you make a screenshot with that message when it happens again? Send it as attachment here: https://wpcerber.com/support/
Also, try to add your network to the White IP Access List.

Hi Gioni, maybe I found the reason for being locked out. I try to explain as best as I can.

When locked into the backend, after some time of inactivity WordPress logs you out somehow. As this happend a few days ago (in Safari – so it’s no Chrome Issue), I looked up the WP Cerber Acitivity Log. There I saw that there where three log outs from my IP-adress protocolled, one minute after another. I think the last time in Chrome this also happend, but some more times.

Could this be the reason for the system lock?

Best regards!

Hi woo-do!

No, WP Cerber doesn’t count attempts to log out.
But WP Cerber counts all attempts to get access to wp-login.php if you checked Immediately block IP after any request to wp-login.php.
Maybe, somehow, browser or something else on your computer sent request to log out to the wp-login.php directly. In that case, of course, WP Cerber immediately locked out your IP.
I’m going to add ability to track extra data for every event on the Activity tab, including requested path/script, user agent (browser) etc. It helps conduct investigation in some special cases like yours.

By the way, did you check Remember Me on the login screen?

Hi woo-do!

How is it going?

Hi Gioni!

Never happend again since my last posting.

Thanks!