about "Immediately block IP's that access these URLs"

Hi,

Yes, you can set a duration for how long the block lasts. Here’s some more info for you…

https://docs.wordfence.com/en/Wordfence_options#How_long_is_an_IP_address_blocked_when_it_breaks_a_rule

Here is a link on Wordfence and blocked IP’s..

https://docs.wordfence.com/en/Blocked_IPs

Let me know if you have questions after checking those links out.

Thanks!
Brian

cool
Am I right, that setting “How long is an IP address blocked when it breaks a rule” in the “Firewall Rules” is responsible not only for blocking ip, which broke the rules Firewall?
it is also responsible for the duration of temporary blocking visitors who come under the rule “Immediately block IP’s that access these URLs” from the “Other Options”?

ie if I put the 15 minutes, then when someone try to access the page /login ip address will be blocked only for 15 minutes, and then unlocked?

and these blocked addresses are displayed during the locking on the tab
“IP’s that are blocked from accessing the site”?

Yes, you are correct.

thanks!

I thought I could “permanently” block IPs too. What does permanent mean?

If I understand correctly, you can not permanently block …
can be maximum 1 month.

You can block an IP for up to 60 days. Does anyone know why there is not an option to permanently block an IP in the Options settings. In cases where only the site admin has access that would definitely make sense.

I have several sites that have hundreds of hackers trying to login as admin and I’d like to automatically block them permanently. There is no reason other than mischief or worse that anyone would try to login as admin. I can permanently block IPs in the Blocked IPs page but it’s a manual process that is a huge pain.

Does not seem to be s direct line to Wordfence support unless you are a premium member.

Is the Wordfence Premium member cost per website or for any number of sites?

Terry,

Premium is priced per API key which installs on one instance of WordPress. If you use multisite, that currently only counts as one instance of WordPress. If each site you run has a separate WordPress install, then you’d need an API key for each instance of WordPress.

Scroll to bottom of the page for pricing and features

https://www.wordfence.com

Also, if you do not actually have an “admin” user account on your site you can block that username from accessing. See the link below.

https://docs.wordfence.com/en/Wordfence_options#Immediately_block_the_IP_of_users_who_try_to_sign_in_as_these_usernames

Thanks!
Brian

Thank you Brian. Yes I have already blocked anyone trying to use admin or Admin. Does that mean if anyone is locked out using these user names they are permanently blocked?
Regards,
Terry

This whole permanent thing is disturbing .. also I don’t know if anyone has tried this but exporting a site’s settings to another site DOESN’T export blocked IPs .. very annoying.

WFBrian it would be very helpful if one could at least do multiple selections of IPs that have been blocked due to violation of login rules so that instead of having to laboriously copy and paste individual IPs to block them permanently, you could do so with one click after selecting them. I spend a lot of time whacking obvious hackers in that way.

I know you can block networks, ranges of IPs and various signatures but I either don’t know enough about those to be confident I won’t inadvertently block legitimate visitors, or the process is time consuming and therefore not a better alternative.

And I hear you BreezyOhio!

Terry

TerryN, sorry, but where do you read that, you can block up to 60 days?

about permanent blocking – great opportunity to lock their osetiteley since I doubt that the bad guys have a dedicated ip addresses and use only them. And that is IP is dynamic, but now he’s a cracker, and a little later – a normal visitor.

If I understand correctly answer plugin authors above, the permanent blocking is not provided … or am I wrong?

someone02 Login Security Options allows blocking up to 60 Days. Permanent blocking can be done when you go to Blocked IPs in Options but you have to copy each IP and paste it into the spot at the top of the page and click block.

Undoubtedly the bad guys are using dynamic IPs which makes the task of cleaning them out impossible.