Plugin locked me out

Hi,

1) How is this possible, since it’s a matter of fact that nobody no failed login attempts were made from this IP address. So why are such false-positive IP blocks even happening?

Have you whitelisted your IP address?

2) When I click on “request unlock” and enter an e-mail, I get the error message “user not found”, so no unlock e-mail is ever sent out.
Why not? Is only a specific e-mail allowed? If so, where can I find it?

Can you confirm the account name you are using to log in exist in your site? Has anything changed lately in your site or server?

Thank you

• This reply was modified 4 years, 5 months ago by mbrsolution.

Hi,

Have you whitelisted your IP address?

I have not, since it’s a dynamic IP and would therefore be ineffective since it keeps changing.

Has anything changed lately in your site or server?

No, nothing has changed lately on the server.

You didn’t actually answer any of my questions, though, just asked your own.

Would you be so kind to answer them?

Particularly how it is possible that an IP address gets blocked for alleged “too many failed login attempts”, when I’m the only one using the IP address and can therefore confirm that no such failed attempts happened?

Thank you!

Hi,

You didn’t actually answer any of my questions, though, just asked your own.

Would you be so kind to answer them?

Before I could answer your questions, I needed to find out a few things with the questions I asked above.

Particularly how it is possible that an IP address gets blocked for alleged “too many failed login attempts”, when I’m the only one using the IP address and can therefore confirm that no such failed attempts happened?

Our plugin will only block your IP address is something happened. For example you entered the wrong name too many times, or you typed the password incorrectly too many times. Although you say and can therefore confirm that no such failed attempts happened?, did you accidentally typed the above incorrectly more than the allowed times? Do you have a cache plugin installed? If you do, it might be interfering with the login form? Have you updated any plugin or installed a plugin that might interfere with our plugin’s login process?

Are you the only admin user that logs into your site?

Kind regards

• This reply was modified 4 years, 5 months ago by mbrsolution.

Hi,

thank you for adressing the question more specifically.

Although you say and can therefore confirm that no such failed attempts happened?, did you accidentally typed the above incorrectly more than the allowed times?

That’s what I meant with my previous statement, that I can definitely confirm that I did not enter any wrong credentials, not even once.

And since I’m the only user from this IP address, there’s no reason why this IP should get blocked for failed login attempts, that’s precisely my point.

Do you have a cache plugin installed?

I have the very popular WP Super Cache installed. I don’t think you want to tell me your plugin is incompatible with one of the most-used caching plugins out there.

Are you the only admin user that logs into your site?

Yes, I am.

Thank you for your support!

Hi,

I have the very popular WP Super Cache installed. I don’t think you want to tell me your plugin is incompatible with one of the most-used caching plugins out there.

No, I am not saying that our plugin is incompatible with WP Super Cache, however cache plugins can sometimes cause issues with login and registrations pages.

Do you have one of the Brute Force features enabled? Are you using the Login Lockdown feature?

Kind regards

• This reply was modified 4 years, 5 months ago by mbrsolution.

Do you have one of the Brute Force features enabled?

I only have the following 2 features enabled under the “brute force” menu:

– honeypot On Login Page
– Captcha On Login Page

Are you using the Login Lockdown feature?

Yes, I am. In fact, I assumed that it’s precisely that feature that erroneously keeps blocking my IP address.

Hi,

Yes, I am. In fact, I assumed that it’s precisely that feature that erroneously keeps blocking my IP address.

Can you share your current settings?

– Captcha On Login Page

Are you using Google reCAPTCHA v2 or plain math captcha to log into your site?

Thank you

Hi,

Can you share your current settings?

– all ceckboxes checked except “Instantly Lockout Invalid Usernames” and “notify by e-mail”

– max login attempts: 5
– login retry period: 5 min
– time length logout: 60 mins

Are you using Google reCAPTCHA v2 or plain math captcha to log into your site?

plain math captcha.

Thanks

Hi,

When I click on “request unlock” and enter an e-mail, I get the error message “user not found”,

The above note still baffles me. The fact that the error message indicates that the user is not found means something is interfering with the login process and maybe even your admin account. Do you have any other security plugin or a none security plugin in your site that might interfere with the login process?

Regards

• This reply was modified 4 years, 5 months ago by mbrsolution.