Suddenly getting notifications on every login.

  • Resolved Anthony

    (@hcmobilemedia)


    1 week, 2 days ago

    I have this plug-in configured with an exclusion for my work’s static IP address. This has worked well for a while now, but over the last month, the plug-in suddenly started sending me login notifications every time I login. I did perform the update the version 2.4 around August 9th, but I don’t think that’s the issue, because I reverted to version 2.3 and it is still happening.

    I’m on WordPress 6.9.7. The only WordPress updates I installed in the last month were minor security fixes in the 6.9 branch.

    My site is cached through Fastly and also proxied (but not cached) through Cloudflare, but this was all in place when I first installed the plug-in and everything was working fine. Even changes in their infrastructure shouldn’t have affected anything because the exclusion I set is based on a static IP from my end. The IP forward line shows my static IP, plus Cloudflare’s, plus another IP which I think might be Fastly. I even tried adding these IPs to the exclusion list.

    Can someone help point me in the right direction? I wasn’t sure whether to ask here first or start with my web hosting company.

    Here’s what the login notification email shows:

    IP REMOTE: 140.248.77.110
    IP CLIENT: undefined
    IP FORWARD: (my static IP, redacted), 104.22.62.24, 140.248.77.110
    HOST REMOTE: 140.248.77.110
    HOST CLIENT: undefined
    HOST FORWARD: undefined

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Author Jeff Starr

    (@specialk)

    1 week, 2 days ago

    Glad to help. I’m not sure what might be happening but it sounds like a caching issue. Have you tried excluding the login page from your caching setup? Just an idea something to try.

    Thread Starter Anthony

    (@hcmobilemedia)

    1 week, 2 days ago

    I just double-checked with my host. Login page is excluded from caching by default. All of the following are excluded:

    /wp-admin
    /.well-known/acme-challenge
    /xmlrpc.php
    /wp-login.php
    /wp-cron.php

    Plugin Author Jeff Starr

    (@specialk)

    1 week, 2 days ago

    Hmm.. and you have tried adding all related IP addresses? (e.g., server, proxy, cache, ISP, etc.)

    Thread Starter Anthony

    (@hcmobilemedia)

    1 week, 2 days ago

    Are you asking if I tried adding all related IP addresses to the plug-in’s exclusion list? I did try adding the IP addresses that showed up on the IP FORWARDING line in the login notification email. I haven’t tried adding an IP range in the plug-in settings. Is that supported?

    Plugin Author Jeff Starr

    (@specialk)

    1 week, 2 days ago

    No I meant that you may want to include not just your server IP address but also any other addresses that may be involved. For example, if you have a site that is running behind a proxy server, then you would want to add the proxy IP address, the server IP address, and your own ISP address. Just to make sure that you’ve got them all. Then if that works, you can do some testing and whittle down the list, if desired.

    Thread Starter Anthony

    (@hcmobilemedia)

    1 week, 2 days ago

    Ah okay. Yes, I believe that’s what I did. When I looked it up online, one of those forwarding IPs belongs to Cloudflare and the other seemed to be coming from Fastly. I put those two in, plus the one from my ISP. It’s just weird that it was working before with only my static IP in there.

    Anyway, you’ve given me more than enough of your time. Thank you for sharing your thoughts!

    Plugin Author Jeff Starr

    (@specialk)

    1 week, 2 days ago

    You are welcome, glad to help anytime.

    Also thank you very much for the great review, much appreciated 🙂

Viewing 7 replies - 1 through 7 (of 7 total)

You must be logged in to reply to this topic.