Question about an Advanced Options > Alerts setting

Hi @bothhands,

Indeed the second option relies on the first option, so you must first enable the “Alert me when someone with administrator access signs in“ option and then enable the second one so Wordfence only alerts you when that administrator signs in from a new device or location.

Note that you’ll need to make sure you have cookies enabled in your web browser.

Thanks for the timely and very helpful reply.

I read an online ‘How to” article that suggested disabling the first option and enabling the second. The logic didn’t look right to me, but then, some aspects of some plugins are badly worded – so I thought it best to seek the answer “straight from the source.”

And that’s exactly what I received. =]

Thanks a lot, and thanks for the tip about keeping browser cookies enabled. Wordfence is a Godsend. Keep up the good (GREAT) work!

• This reply was modified 7 years, 2 months ago by BothHands.

BOTH settings are enabled per your advice above. There should be NO notifications when I login (I login only from one computer). BUT…Wordfence IS sending notification when I log in.

Please take another look at this conversation and tell me how to set options so I only receive notification/alert when someone tries to login as Admin from some other location or device.

Thanks

• This reply was modified 7 years, 2 months ago by BothHands.

BOTH settings are selected (per your instructions) but I continue to receive notifications whenever I login to the site. I log in from one location only, so the notifications should not be generated.

My WordPress site is installed in a SUBDIRECTORY.
For example: public_html/wordpress

Might this be the cause of the problem?

I have identical .htaccess files in the root and in the wordpress subdirectory. Would a specific modification of the Wordfence code resolve this?

• This reply was modified 7 years, 2 months ago by BothHands.

Hi @bothhands,

Can you confirm that all successful admin logins are made from the same IP address?

In order to do so:

• Go to the Wordfence Live Traffic page
• Select the “Logins and Logouts” filter
• Check/compare IP addresses for each successful admin login

Thanks for your reply. I followed your instructions. All logins and logouts are me from the same location, but my IP is NOT a static IP. It changes frequently – several times each day, I think. I see eight or ten IP addresses represented in about 7 days of traffic.

Hi @bothhands,

The IP address is the only way to identify the source of a connection.

So if your IP address changes it will appear, from a network point of view, as if you’re logging in from a different location; hence the alerts you’re receiving.

I see. So I’ll have to disable those two options. Too bad, as that would otherwise be a useful indicator of trouble afoot.

Just a suggestion: The details page that explains WF Advanced Options is a very helpful resource. Perhaps you will include instructions for the two options in question, stating clearly that they do not work for DYNAMIC IP addresses

I think it’s very common for administrators of small websites to have dynamic IP addresses. STATIC IPs are usually optional and are fairly expensive.

In any event, thanks for your assistance.