Too many IP blocks

  • Resolved david_sherman

    (@david_sherman)


    1 year, 10 months ago

    Good evening Defender team, I’ve been facing a problem for some time now, about 4 months or so, many users of our system are complaining about undue blocks, the person didn’t have a password or anything and at one time or another the person is blocked, we’re done releasing the client’s IP but many have the dynamic IP due to the internet services in Brazil, due to this exchange of IPs the blocks are happening a lot.

    What can I do to reduce these incidents of blocked IP in the system?

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support Nithin – WPMU DEV Support

    (@wpmudevsupport11)

    Hi @david_sherman,

    Could we know what type of blocks are detected in the Defender logs for IPs which you have unblocked under Defender > Firewall > Logs? ie whether its a 404, Login or lockouts etc?

    If possible, please do share a screenshot of the logs of the recent IPs which were listed in the logs. You can mask any sensitive information in the screenshot if needed before sharing.

    Looking forward to your response.

    Kind Regards,

    Nithin

    Thread Starter david_sherman

    (@david_sherman)

    Thanks a lot for the reply @wpmudevsupport11

    So this and another strange thing, we usually release it because the logs contain password errors or 404 requests, but for this type of person, nothing is being recorded in the logs and the person is blocked without having any record of it.

    Still among these people, we have a student who is always blocked every time her IP changes because it is dynamic, and the logs do not register this block, which is exactly what is happening with more people.

    Plugin Support Patrick – WPMU DEV Support

    (@wpmudevsupport12)

    Hi @david_sherman

    Thank you for the update,

    Can you confirm if Defender is getting your IP correctly on the Detect IP Addresses? https://wpmudev.com/docs/wpmu-dev-plugins/defender/#detect-ip-addresses

    If no logs are being recorded it is possible Defender is getting the wrong IP which can cause those lockouts, another possible situation is the caching, can you try to clear all caches if you get any extra reports and IP is not being reported?

    Defender does set the do not cache define also a response header but we got some cases where caching plugin not respecting the define.

    Let us know the result you got.
    Best Regards
    Patrick Freitas

    Plugin Support Nithin – WPMU DEV Support

    (@wpmudevsupport11)

    Hi @david_sherman,

    Since we haven’t heard from you for a while. I’ll mark this thread as resolved for now. Please feel free to re-open the thread if you need further assistance.

    Best Regards
    Nithin

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Too many IP blocks’ is closed to new replies.