I changed the time from 10 to 20 seconds, and it was then that we can say it all started, now I'm back 10 seconds back and see what happens.
Now i see, the login page.The emails from Defender, aren't warnings of an upcoming attack. But successfully repelled attacks. Defender is not the problem.