HTTP/2 301
server: nginx
date: Mon, 29 Dec 2025 04:10:12 GMT
content-type: text/html; charset=UTF-8
location: https://developer.jetpack.com/module/protect/
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
x-frame-options: SAMEORIGIN
vary: accept, content-type, cookie
x-redirect-by: WordPress
x-ac: 1.bom _dca MISS
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
server-timing: a8c-cdn, dc;desc=bom, cache;desc=MISS;dur=350.0
HTTP/2 200
server: nginx
date: Mon, 29 Dec 2025 04:10:12 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-hacker: Want root? Visit join.a8c.com/hacker and mention this header.
host-header: WordPress.com
x-frame-options: SAMEORIGIN
vary: accept, content-type, cookie
content-encoding: gzip
x-ac: 1.bom _dca MISS
alt-svc: h3=":443"; ma=86400
strict-transport-security: max-age=31536000; includeSubDomains; preload
server-timing: a8c-cdn, dc;desc=bom, cache;desc=MISS;dur=469.0
protect – Jetpack Developer Resources
Filter controls if an email recovery form is shown to blocked IPs. A recovery form allows folks to re-gain access to the login form via an email link if their IP was mistakenly blocked.
Short-circuit check_login_ability. If there is an alternate way to validate the current IP such as a hard-coded list of IP addresses, we can short-circuit the rest of the login ability checks and return true here.
Filter controls maximum timeout in waiting for reponse from Protect servers.
Allow Math fallback for blocked IPs.
Fires before every failed login attempt.
Fires before every killed login.