Locked out of admin, have followed steps

  • Resolved JanineRijnvis

    (@janinerijnvis)


    2 years, 6 months ago

    Hi, I was locked out of accessing my WordPress site. I searched the forums and found a solution. I renamed the Wordfence plugin, could log in and installed the Wordfence Assistant. I deactivated the Firewall, and renamed my Wordfence back to it’s original. I followed these steps (from 1 year ago) I found on your forum:

    `Once Wordfence is activated again, find your public facing IP address at: https://www.whatsmyip.org/

    Unblock your IP on the Firewall > Blocking page (you can search for the IP using the advanced filters)

    If you can’t find your IP there, then take a look at Live Traffic to see if all logins and logouts seem like they have the same IP address.

    If they do, look at Wordfence Dashboard > Global Options > General Wordfence Options > How does Wordfence get IPs and cycle through the options there until it displays the IP address you discovered on https://www.whatsmyip.org/. That will be the setting you need to use going forward, so click the SAVE button once you’re done.

    You will have received an email from Wordfence Central as we trigger those, but if you are not receiving other emails, the unlock emails actually come from your website and not our servers. If you aren’t getting emails then you might want to check:`

    My IP is not showing up as blocked.
    I checked my Live Traffic, it has various different IP addresses (I think I had VPN on)
    So obviously I can’t follow the rest of the instructions.

    I logged out of my site, tried to log in again and was locked out again. The only way I can get in is to rename Wordfence in my C-panel.

    I hope someone can assist me.

    Janine

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @janinerijnvis, thanks for getting in touch.

    I wouldn’t imagine the VPN is an issue in itself, but if you’re seeing all different IPs being blocked then the instructions aren’t necessarily applicable in your case as you say. The checks above are specifically for a site that may be detecting visitor IPs as the server IP, or a proxy server IP instead of the user’s public-facing one. The result of this would be that a block for 1 malicious user would block everybody attempting to access your site until it expired.

    You can still check the “How does Wordfence get IPs” section to see if this is an issue for you despite not seeing evidence of that yet in Live Traffic. It may also be worth spending a period of time in Learning Mode to see if any plugins added to your site are causing requests you make to be blocked.

    From the Wordfence Dashboard click on Manage WAF. Then you will see Basic Firewall Options > Web Application Firewall Status. Change the option to Learning Mode. Now perform the actions that were causing issues. This will help Wordfence learn that these actions are normal and it will allow them in the future. After you have finished performing the actions, switch the WAF from Learning Mode back to Enabled and Protecting. Now test to see if these actions work correctly.

    If neither check appears to resolve the situation, let me know.

    Thanks,

    Peter.

    Thread Starter JanineRijnvis

    (@janinerijnvis)

    Hi Peter

    Thank you for coming back to me. I noticed my Wordfence is in Learning Mode, which it has been since I installed it (I had no idea it would do this automatically to learn my site)…. but it still locks me out and I don’t receive any emails for orders.

    Thank you
    Janine

    Plugin Support wfpeter

    (@wfpeter)

    Hi @janinerijnvis,

    Sorry to hear that it’s still a continuing issue, did you have any luck with checking the IP detection on your site?

    If you did and IP detection seems fine, feel free to send a diagnostic report to wftest @ wordfence . com. You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

    Thanks,

    Peter.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Locked out of admin, have followed steps’ is closed to new replies.