@wpcomuser
Let’s deal with the all pages showing ‘error’ issue in this topic.
Please open a seperate topic for the blank page issue.
When the iTSec plugin triggers a host lockout, the ‘error’ page is displayed.
Host lockouts are caused by too many invalid login attemps from a brute force attack OR by too many 404 requests.
Brute Force Protection and 404 Detection are the plugin features controlling this behavior.
So basically this is the iTSec plugin doing its work.
dwinden
Well then it overwrote my whitelist of my own IP. And yes, I’m on a static.
@wpcomuser
Did you whitelist your IP address temporarily (24h) or permanently ?
temporarily = iTSec plugin Dashboard/Settings/Logs page -> Temporarily Whitelist my IP button
permanently = iTSec plugin Settings page -> Global Settings -> Lockout White List -> Add my current IP to Whitelist button
So if I understand correctly it has been working fine for a while and suddenly without any obvious change this issue started.
Are you using the latest iTSec plugin release (5.2.0) ?
If so you must have updated the iTSec plugin recently since 5.2.0 was released 2 weeks ago. Any chance the issue started after updating the plugin to 5.2.0 ?
Are you able to access the site (frontend\backend) from a different IP ?
dwinden
The only issues I experienced were since the update, but I do not know if they started immediately after updating or not.
Yes, I had long ago whitelisted my IPs permanently, and also when I log-in and change settings I generally also temporarily whitelist my IP (although unnecessary no doubt).
I tried uninstalling and reinstalling the plugin, same issue.
I also dropped all three “itsec” tables, and then reinstalled, and same issue.
I gave up before going through the options table to remove all options there.
I had the same issue from my home and my work IP. Did not try from my phone (to give a third IP). When I get a moment I’ll reinstall, re-enable, and test that.
@wpcomuser
It could be the host lockouts are occurring because of too many 404 requests.
Did you enable the 404 Detection feature ?
If so please check the Logs page and select 404 Errors as the Select Filter:.
If there are many 404 Errors logged you could temporarily try and disable the 404 Detection feature. Just too see whether is has any impact on this issue.
dwinden
I will try, but this is on a site I can not take down for testing easily. I can more easily test the “blank screen” issue in the other thread.
@wpcomuser
Can you post the website URL so I can have a look at it ?
(I do realize that the iTSec plugin is probably deactivated).
It would help a lot if you could log into phpMyAdmin and export
the content of the 3 wp_itsec_* tables and then provide us with that export file.
This would help in analyzing the exact cause for the host lockouts.
Please note that even though I’m not an iThemes employee your data is safe with me.
dwinden
