Blocked My Own IP

Update: I used a plugin to whitelist my IP address for my home computer/wifi connection, and that worked for now. But what happens when I remove this plugin?

• This reply was modified 6 years, 9 months ago by sarashley.

wordfence blocked my ip for no reason at all. Right user. Right pass. Right credentials. I was able to login using https://my.bluehost.com/hosting/wordpress_tools/ . Deleted plugin .Changed password . whitelisted Ip . installed fresh upload . Did it work ? NO . It only works if I delete plugin and don’t reinstall it again. And why is Wordfence not sending me an email to reset pass and access the system. I have over 15 WP sites with Wordfence active installations and only one is presenting this issue. Please help.

Hello? Anyone?

Hi @sarashley

First of all, you need to make sure it’s Wordfence that is blocking access to your site, we don’t have wordings like “the connection is refused” in Wordfence. And if your IP address was blocked by Wordfence, I doubt that you can whitelist it via any other plugin.

@gascone do you have a screenshot for the block message? if so, please share it.

Also, you can follow this guide to regain access to your site in case you were locked out by mistake.

Thanks.

Hello wfalaa,
Thanks for your response. This is the message I’m getting:

“Your request was received

We received a request to email “___________” instructions to unlock their access. If that is the email address of a site administrator or someone on the Wordfence alert list, they have been emailed instructions on how to regain access to this system. The instructions we sent will expire 30 minutes from now”.

No email received.

Thanks

• This reply was modified 6 years, 8 months ago by Gascone.

Hello @gascone

I meant the first block message that says something like “Your access to this site has been limited” or “You are temporarily locked out”, as this message will include the reason why you got blocked. If you have a screenshot of this message please share it. Also, may I get an update about your current status? can you log in your website successfully and access or not?

Thanks.

Hello wfalaa,
WF doesn’t give any info:
You are temporarily locked out

You have been temporarily locked out of this system. This means that you will not be able to sign-in or use several other features that may compromise security. Please try back in a short while.

Return to the site home page
Attempt to return to the admin login page (you may still be locked out)

If you are a site administrator and have been accidentally locked out, please enter your email in the box below and click “Send”. If the email address you enter belongs to a known site administrator or someone set to receive Wordfence alerts, we will send you an email to help you regain access. Please read this FAQ entry if this does not work

Thanks wfalaa.

• This reply was modified 6 years, 8 months ago by Gascone.

BTW, my password isn’t on the list of breached credentials. And my account hasn’t been compromised in a data breach.

I can only access the site via https://my.bluehost.com/hosting/wordpress_tools/users and only temporarily because WF locks me out again. The site works fine if I uninstall WordFence.

Thanks

Hi @gascone

Then that’s a different story, it has nothing to do with your password being in a data breach or not. If you can access your WordPress Dashboard with Wordfence activated for just minutes, please do the do the following:
– Go to (Wordfence > Tools > Diagnostics > IP Detection) and see which one has the word “In use” beside it. That option must reveal your real IP address, which you can check using this tool for example.

Most probably your IP isn’t being detected correctly, in this case you will have to adjust “How does Wordfence get IPs” option to the value that was reporting the correct IP address in the previous step.

Let me know how it goes,
Thanks.

Hi wfalaa,

I did as you advised. It looks like Wordfence is getting IPs correctly. The IP in use is correct (mine), and the IP used by my server is also correct…

Thanks.

• This reply was modified 6 years, 8 months ago by Gascone.

Hi @gascone

To solve this issue temporary, you can add your IP address to “Whitelisted IP addresses that bypass all rules“.

Then you will have a chance to check the “Brute Force Protection” options to ensure that you aren’t violating any of them.

Thanks.

Hi wfalaa

Whitelisting my Ip was the first step I took, although I don’t have a permanent IP address (my IP is dynamically assigned). There were no login failures. I was automatically locked out when I entered my user name. And why is Wordfence not sending me an email to reset pass and access the system (?)

Thank you

BTW, i dont’ have ” Immediately lock out invalid usernames ” enabled

Thanks