HELP with USER ID BANNING

  • Resolved scargill

    (@scargill)


    4 years, 3 months ago

    I have used the free Wordfence to ban user names like tech – but every day I get dozens of login sttempts by user admin (I’ve changed my admin user name to something else). After 4 attempts they are blocked and simply try again with another IP in another part of the world – banning user “admin” simply does not seem to work. HELP…

    • This topic was modified 4 years, 3 months ago by scargill.

    The page I need help with: [log in to see the link]

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Support WFAdam

    (@wfadam)

    Hello @scargill and thanks for reaching out!

    I recommend reading into our Brute Force Guide here:
    https://www.wordfence.com/help/firewall/brute-force/#lockout-usernames

    These blocks are simply Wordfence just doing its job. If you want to be able to block a login attempt under a specific name though, Firewall > All Firewall Options > Brute Force Protection. Make sure to add the user name “admin” to Immediately block the IP of users who try to sign in as these usernames.

    Let me know if this helps!

    Thanks!

    Thread Starter scargill

    (@scargill)

    Hi WFAdam – thats exactly what I’ve been using…

    Firewall – all firewall optiond – brute force protection… I wish I could include an image here…

    Ticked Immediately block the IP of users who try to sign in as these usernames = I’ve added tech, admin and login – yet I am stioll getting regular emails saying that these people have been banned after 3 attempts (I set the max attempts to 3). Am I missing something? It isnt stopping them – and of course they then just go onto anotrher IP address – but from what you are sayingf it should ban them immediately. I set this up days ago and still I’m getting dozens of “exceeded 3” every day – mainly for admin.

    HELP

    Pete

    Plugin Support WFAdam

    (@wfadam)

    Hello again @scargill

    It should be blocking them instantly. Can you send me a screenshot of your brute force protection section to wftest @ wordfence . com. I would like to take a look at this.

    Thanks!

    Thread Starter scargill

    (@scargill)

    Hi

    I sent you the screenshot as requested – admin should be being blocked instantly but it isn’t….. 3 attempts and blocked – but of course then the person moves onto another IP. I’m gettinf dozens of emails a day from Wordfence..

    Pete

    Plugin Support WFAdam

    (@wfadam)

    Hello @scargill

    Just to double-check, are all these usernames (tech, admin, login) not valid usernames on your site? I noticed in the screenshots that you have “Immediately lock out invalid usernames”. If “admin” wasn’t a valid username, they should be getting blocked immediately, just with that setting alone. Check to verify that “admin” is not a user on your site.

    “Immediately block the IP of users who try to sign in as these usernames” will only work if it’s not a current username on the site. So since both of these are attempting to block admin, it leads me to believe that it might be a current user.

    Let me know what you find!

    Thanks!

    Thread Starter scargill

    (@scargill)

    You were right, I’d forgotten to delete admin….. thanks.

    Plugin Support WFAdam

    (@wfadam)

    @scargill Glad we could figure it out together!

    Let us know if you need any other assistance!

    Thanks again!

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘HELP with USER ID BANNING’ is closed to new replies.