wordfence blocks everyone

  • Resolved ghmercado

    (@ghmercado)


    2 months, 1 week ago

    hi, myself and the owner, both admins, regularly cannot login our site. We do not get a ‘Blocked by login security‘ message but rather when we enter our credentials and click ‘login’, the button stays depressed and no further action occurs, the login page is just stuck there.

    I log in by using ftp to rename the plugins/wordfence plugin to plugins/zordfence, in which case we can login normally.

    To diagnose, while logged in i renamed it back to plugins/wordfence and accessed the wordfence admin area. I tried:

    1.) disabled the firewall entirely
    2.) I successfully went through the process of removing the wordfence-waf.php and restoring the .htaccess (its now default) and .user.ini (its now blank)

    I opened a different browser (Chrome in incognito), and tried to login, I still get the same issue.

    Were using cloudflare, but I don’t think that has anything to do with these issues.

    Can anyone provide insight please? Thank you

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    2 months, 1 week ago

    Hi @ghmercado, thanks for getting in touch.

    The firewall rules aren’t the cause of that message so our recommendation would be to keep it in Extended Protection so that it runs before any page content is served to your site’s visitors.

    Blocked by login security setting is displayed for anybody blocked by the Wordfence > All Options > Immediately block the IP of users who try to sign in as these usernames option. There’s a good chance somebody else (or a bot) is trying to log in as one of the usernames listed there, is getting blocked, but IP detection isn’t configured for Cloudflare so everybody will continue to be blocked until that is lifted.

    To ensure Wordfence is detecting IPs correctly, you will most likely need to select “Use the Cloudflare “CF-Connecting-IP” HTTP header to get a visitor IP. Only use if you’re using Cloudflare.” in Wordfence > All Options > General Wordfence Options > How does Wordfence get IPs.

    Let us know how you get on!
    Peter.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.