jalno1

Thank you MountainGuy I will certainly give this a try, at the moment the 3 three IPs getting through mostly are using ‘admin’ as the user name or my domain as the user, thankfully I use neither ??

Thanks for your help!

Hi there,

Here is the email notification I get.

This email was sent from your website “xxxxxxxxx Internet Marketing” by the Wordfence plugin at Sunday 10th of April 2016 at 03:45:25 PM
The Wordfence administrative URL for this site is: https://www.xxxxxx.org/wp-admin/admin.php?page=Wordfence

A user with IP address 46.148.18.162 has been locked out from the signing in or using the password recovery form for the following reason: Used an invalid username ‘admin’ to try to sign in.
User IP: 46.148.18.162
User hostname: 46.148.18.162
User location: Republic of Lithuania

This is just one of many from just 3 or 4 ip addresses that are constantly trying to gain access, I have manually blocked these ip’s but they are still able to try, I get at the very least 10 to 12 emails a day from these.

Hi wfasa,

Thank you for your reply.

I have already blocked these IP addresses and they are still in the list as blocked, however, I am getting around 10 to 12 emails a day from WF through my site telling me these 3 IP address are still attempting to ‘sign in’ using different usernames.

When I first added these IP address I wasn’t getting any notifications from WF but now they seem to either be bypassing the security settings or something so I’ve started getting the email messages again, very strange!!

Thanks