user locked out from signing in

Hello @deheugden and thanks for reaching out to us!

There is currently no way to link an IP to a user profile. The best advice I can give here is to make sure that the username in question isn’t anything like admin, and it is a unique user name. If one specific user is being targeted, I would recommend changing that user’s login name.

Are these bots by design using these logins or are these attacks? If they are coming from the same IP, you could block them from Tools > Live Traffic.

Let me know if this helps!

Thanks!

Many thanks for the reply. According to fhe live traffice, they are human. Blocking can be done but i need to manualy block many many attempts everytime.
Also, it is WordPress. Usernames cannot be changed

• This reply was modified 4 years, 2 months ago by deheugden.
• This reply was modified 4 years, 2 months ago by deheugden.

Hello again @deheugden

It seems that Wordfence is just doing its job by blocking that IP after 4 attempts via the Brute Force Protection rules you have already set up. If it’s one user in question here, I definitely recommend setting up 2fa just to add another layer of security.

Usernames can also be changed via FTP. You could do some google searches on it, also we have a live show called Wordfence Live that covers some security threats and how to change default user names to something different:
https://www.wordfence.com/blog/2020/08/10-wordpress-security-mistakes-you-might-be-making/

Let me know if this helps at all!

Thanks again!