Support » Plugin: iThemes Security (formerly Better WP Security) » Site lockout not succesful

  • I receive an email that a user is locked out.
    However I check the logs and do not see this IP is locked out. Also I am not able to add the IP as banned. Besides the email shows “The host has been locked out until 2016-09-04 05:59:32 and the user has been locked out until 2016-09-04 05:59:32.” which means no lockout is happening at all.
    How to fix this?

Viewing 2 replies - 1 through 2 (of 2 total)
  • I am testing this plugin to lockout users after 3 bad attempts. I see a log message stating that I have attempted bad login attempts, but the plugin does NOT lock me out. What needs to be configured to do so? Also, I would like users who get logged-out after 3 failed attempts to be allowed to try again after 15 minutes. How do I configure this?

    Hi,

    The message is saying that a host AND user has been locked out until that time. Not from the first time to the second time.

    When you log in as an admin you’re automatically whitelisted for 24 hours. So locking yourself out will not work. If you want to test the lockouts you’re need to delete the itsec_temp_whitelist row in the yourprefix_optons table while you’re not logged in.

    Thanks,

    Gerroald

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Site lockout not succesful’ is closed to new replies.