Plugin Support
wfphil
(@wfphil)
Hi @jcalart
One explanation for the missing login alert email is that Wordfence will not send an alert email if it contains the same content as the last sent alert email. This is to prevent duplicate emails being sent when fast attacks take place.
For example if you log in and get an admin login alert email, then if you log out and log in again you won’t get another admin login alert email for your log in. You will only get another admin log in alert email for your log in after Wordfence has sent a different alert email.
Wordfence login security JavaScript and CSS assets are only loaded on the default WordPress login page URL below if our CAPTCHA feature is enabled, or if at least one user account has enabled our two factor authentication feature.
example.com/wp-login.php
What were you looking for precisely on the Tools >> Live Traffic page?
Hi,
Thanks for reply.
The last alert I received is the 25 may and I connect almost every day to the back office.
None of the other sites I work on are acting like this.
And it worries me because I detected some strange activities from my account (order of free products made from my admin account at hours I’m not logged in).
Of course I changed my password but it happened again so the admin log alert is precious for me now…
On the Tools>Live Traffic page I was expecting to see my activity on the site but I don’t see my device…
Plugin Support
wfphil
(@wfphil)
Hi @jcalart
To test it you can do this two ways
First enable the option Alert when someone is locked out from login in the Email Alert Preferences section on the All Options page.
Check that the option Alert me when someone with administrator access signs in is enabled. Check that the sub option Only alert me when that administrator signs in from a new device is disabled.
Now login and logout to see if you get the admin login admin alert email. If you don’t get the admin login alert email then do the following.
1) Use a VPN and create a block for a false username and password. See if you get the lock out email. If you do get the lock out email, then switch back to your normal IP or a different VPN IP address and login to your admin account and see if you get the admin login alert email.
2) Set the option Amount of time a user is locked out to 5 minutes in the Brute Force Protection section on the All Options page. Create a block for a false username and password. See if you get the lock out email. If you do get the lock out email, then wait at least five minutes for your IP address to be unblocked and login to your admin account and see if you get the admin login alert email.
If you don’t get any alert emails then WordPress may not be sending all mail and you can ask your hosting provider if they can see why WordPress is not sending all mail as Wordfence doesn’t send the emails, WordPress does that.
For the unauthorised admin logins we have a site cleaning guide below:
https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/
@jcalart Maybe a long shot but thought I would post in case it helps. Once I had troubles like this but only at one website. The solution, I found out, wasn’t with word fence at all. I had set up everything correctly in word fence but the word press notices weren’t set properly. when you switch the admin word press email address, for security, it requires you to confirm the switched email address, before allowing emails to go thru. Once I realized this, removed the old word press request, created it new, and clicked the confirmation link–it all suddenly started working–including the word fence notices.
