• Resolved Leah

    (@edikitt)


    Apologies, I didn’t think to grab a screenshot before closing the tabs with the exact lockout message, but my IP was blocked for the reason: “Exceeded the maximum number of page not found errors per minute for humans.”

    I was able to get back in by providing an administrator email and all is well, but I wasn’t actually hitting any 404s prior to being blocked, so I’m not exactly sure what prompted Wordfence to block my IP to begin with.

    Any idea what might have caused this to happen? I was making changes prior to this happening, but again, I wasn’t getting any errors and I’m not seeing anything in my 404 logs (from my IP or any other IP).

    Thanks!

Viewing 8 replies - 1 through 8 (of 8 total)
  • Hi, I’ve had a similar problem now and then. In my case I traced it back to my messing around during development work and indeed generating a lot of 404 errors, and thus getting my IP blocked. In your case, since you’re not seeing the 404s in the logs, perhaps there is some other kind of error that triggers Wordfence. Solution in my case was just placing my IP in the “Ignore all rules” box. Perhaps rather than trying to figure out the mystery, just bypass by setting up your IP to be ignored. No idea where that is in the new WF version, apologies. But probably can be found with a bit of clicking around. MTN

    “No idea where that is in the new WF version, apologies. But probably can be found with a bit of clicking around.”

    That this is the case now is a pretty strong indicator the UI/UX of this WF “update” is extremely poor.

    WF – I love you guys, but you really blew it on the UI this time around. Badly.

    Hi @edikitt
    Please double check that “How does Wordfence get IPs” option is set correctly, you can do that by going to “Wordfence > Tools > Diagnostics” and open the “IP Detection” section to make sure your IP is correctly detected there.

    “Whitelisted IP addresses that bypass all rules” is located in (Wordfence > Firewall > Firewall Options > Advanced Firewall Options).

    Thanks.

    readytogosurvival

    (@readytogosurvival)

    Apologies if this has been already address but where did the option to remove a temporarily locked user account go? It used to be on the dashboard page but now I cannot find it. I have a dev that is locked out and I cannot restore his account via the dashboard (not via email).

    Thanks.

    wfalaa

    (@wfalaa)

    @readytogosurvival It’s right there at (Wordfence > Firewall) then click on the “Blocking” tab.

    Thanks.

    readytogosurvival

    (@readytogosurvival)

    Thanks @wfalaa,

    Unfortunately that is not what I am looking for; what I see are permanent and intentional blocks I have made.

    In the past, I could see a list of temporarily blocked accounts which I could then unblock at any time. This is not a set block-list. Hope that helps.

    wfalaa

    (@wfalaa)

    Temporarily locked out IPs should appear there as well, please check this screenshot for example, please make sure that you are checking IPs there in the time period set in “How long is an IP address blocked when it breaks a rule” under (Firewall > Firewall Options > Rate Limiting).

    Thanks.

    readytogosurvival

    (@readytogosurvival)

    Thanks again @wfalaa.

    This was user error. A known account was using the wrong username, which is set to block immediately if no known account is associated. Best.

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘Temporarily locked out, false positive?’ is closed to new replies.