• Hello

    I have an issue. I have not login my account for a good long while. Today I login, it said ERROR: Too many failed login attempts. Please try again in 23 hours.

    And I tried again, then it said “Too many failed login attempts. Please try again in 11 hours.”

    I dont understand what happen. I logged in by disabling the plugin via FTP, then I remove all the log. And try again. The same result. I have to disable this plugin for good.

    Any idea why?

    Thank you

    below are the debug log

    IPs:
    HTTP_CF_CONNECTING_IP = IP0
    HTTP_X_FORWARDED_FOR = IP0
    REMOTE_ADDR = IP1

    Plugin Version: 2.26.24
    WordPress Version: 6.6.1
    Is Multisite: no

    Active Plugins:
    WPCodeBox 2 1.2.1 (https://ww.wp.xz.cn/plugins/wpcodebox2/)
    FluentSMTP 2.2.92 (https://ww.wp.xz.cn/plugins/fluent-smtp/)
    Advanced Custom Fields PRO 6.6.2 (https://ww.wp.xz.cn/plugins/advanced-custom-fields-pro/)
    BBQ Pro 3.8.1 (https://ww.wp.xz.cn/plugins/bbq-pro/)
    PublishPress Capabilities 2.21.0 (https://ww.wp.xz.cn/plugins/capability-manager-enhanced/)
    Convert to Blocks 1.3.4 (https://ww.wp.xz.cn/plugins/convert-to-blocks/)
    Custom Post Type UI 1.18.0 (https://ww.wp.xz.cn/plugins/custom-post-type-ui/)
    Disable All WordPress Updates 1.8.0 (https://ww.wp.xz.cn/plugins/disable-wordpress-updates/)
    Duplicator Pro 4.5.17.4 (https://ww.wp.xz.cn/plugins/duplicator-pro/)
    Enhance Functionality 1.0.1 (https://ww.wp.xz.cn/plugins/enhance-functionality/)
    Hydrogen Pack 1.6.2 (https://ww.wp.xz.cn/plugins/erropix-hydrogen-pack/)
    Fluent Forms 6.0.4 (https://ww.wp.xz.cn/plugins/fluentform/)
    Fluent Forms Pro Add On Pack 6.0.4 (https://ww.wp.xz.cn/plugins/fluentformpro/)
    WP Armour - Honeypot Anti Spam 2.3.04 (https://ww.wp.xz.cn/plugins/honeypot/)
    Limit Login Attempts Reloaded 2.26.24 (https://ww.wp.xz.cn/plugins/limit-login-attempts-reloaded/)
    Microthemer 7.4.1.8 (https://ww.wp.xz.cn/plugins/microthemer/)
    Oxy Toolbox 1.6.2 (https://ww.wp.xz.cn/plugins/oxy-toolbox/)
    OxyExtras 1.4.7 (https://ww.wp.xz.cn/plugins/oxyextras/)
    Oxygen Gutenberg Integration 1.4.5 (https://ww.wp.xz.cn/plugins/oxygen-gutenberg/)
    Oxygen 4.9.1 (https://ww.wp.xz.cn/plugins/oxygen/)
    Resize Image After Upload 1.8.6 (https://ww.wp.xz.cn/plugins/resize-image-after-upload/)
    RunCloud Hub 1.4.9 (https://ww.wp.xz.cn/plugins/runcloud-hub/)
    Rank Math SEO 1.0.258 (https://ww.wp.xz.cn/plugins/seo-by-rank-math/)
    ShortPixel Adaptive Images 3.11.1 (https://ww.wp.xz.cn/plugins/shortpixel-adaptive-images/)
    Simple History 5.18.0 (https://ww.wp.xz.cn/plugins/simple-history/)
    TranslatePress - Multilingual 2.9.12 (https://ww.wp.xz.cn/plugins/translatepress-multilingual/)
    TranslatePress - Personal 1.4.5 (https://ww.wp.xz.cn/plugins/translatepress-personal/)
    Translation 1.0.1 (https://ww.wp.xz.cn/plugins/translation-block/)
    WP Armour Extended - Honeypot Anti Spam 1.40 (https://ww.wp.xz.cn/plugins/honeypot/)
    WP Grid Builder - Oxygen 1.2.1 (https://ww.wp.xz.cn/plugins/wp-grid-builder-oxygen/)
    WP Grid Builder 2.0.6 (https://ww.wp.xz.cn/plugins/wp-grid-builder/)
    WP Headers And Footers 3.1.2 (https://ww.wp.xz.cn/plugins/wp-headers-and-footers/)
    WPvivid Plugins Pro 2.2.38 (https://ww.wp.xz.cn/plugins/wpvivid-backup-pro/)
    WPvivid Backup Plugin 0.9.121 (https://ww.wp.xz.cn/plugins/wpvivid-backuprestore/)

    Active Theme:
    Oxygen Bare Minumum Theme (https://ww.wp.xz.cn/themes/oxygen-bare-minimum-theme/)
    • This topic was modified 4 months, 3 weeks ago by Yui.
    • This topic was modified 4 months, 3 weeks ago by theblueli.
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support brucewayne25

    (@brucewayne25)

    It looks like CloudFlare is not sending the correct IP address. You should add HTTP_CF_CONNECTING_IP to trusted origins. That should fix your issue.

    Thread Starter theblueli

    (@theblueli)

    Hello

    Sorry for late reply. I forgot this thread.

    So I have added the
    I even add all
    REMOTE_ADDR, HTTP_X_FORWARDED_FOR, HTTP_CF_CONNECTING_IP, HTTP_X_SUCURI_CLIENTIP

    But it is still happening randomly..

    IPs:
    HTTP_CF_CONNECTING_IP = IP0
    HTTP_X_FORWARDED_FOR = IP0
    REMOTE_ADDR = IP1

    Plugin Version: 2.26.28
    WordPress Version: 6.9
    Is Multisite: no

    Any other clues? and yes the doamin indeed is managed by cloudflare

    Thank you

    Plugin Support brucewayne25

    (@brucewayne25)

    You should add ONLY HTTP_CF_CONNECTING_IP, so the resulting value is REMOTE_ADDR, HTTP_CF_CONNECTING_IP

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.