Title: Block User Automatically
Last modified: December 18, 2017

---

# Block User Automatically

 *  Resolved [helidoc](https://wordpress.org/support/users/helidoc/)
 * (@helidoc)
 * [8 years, 5 months ago](https://wordpress.org/support/topic/block-user-automatically/)
 * There is a particular past username that somehow the hackers know about. I have
   three issues:
 * 1) How do they know about this user at all since it has been deleted.
    2) I know
   that a login attempt by this user is malicious – how do I automatically block
   them? 3) I had modified my htaccess file, but it seems they are still able to
   determine the usernames as one valid user gets spurious login attempts as well
 * Thanks much! Great product!
    Steve
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fblock-user-automatically%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Thread Starter [helidoc](https://wordpress.org/support/users/helidoc/)
 * (@helidoc)
 * [8 years, 5 months ago](https://wordpress.org/support/topic/block-user-automatically/#post-9792990)
 * Admin login IP addresses could be automatically blocked as well.
 *  [wfyann](https://wordpress.org/support/users/wfyann/)
 * (@wfyann)
 * [8 years, 5 months ago](https://wordpress.org/support/topic/block-user-automatically/#post-9801103)
 * Hi [@helidoc](https://wordpress.org/support/users/helidoc/),
 * Please find detailed information about _usernames harvesting_ in [this article](https://www.wordfence.com/blog/2016/12/wordfence-blocks-username-harvesting-via-new-rest-api-wp-4-7/)
   on our blog.
 * Can you confirm that the “[Prevent discovery of usernames […]](https://docs.wordfence.com/en/Wordfence_options#Prevent_discovery_of_usernames_through_.27.2F.3Fauthor.3DN.27_scans.2C_the_oEmbed_API.2C_and_the_WordPress_REST_API)”
   option is enabled on your site?
 * Also, make sure to add that username in the “[Immediately block the IP of users who try to sign in as these usernames](https://docs.wordfence.com/en/Wordfence_options#Immediately_block_the_IP_of_users_who_try_to_sign_in_as_these_usernames)”
   box –you can also use this feature to block login attempt using the “_admin_”
   username.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Block User Automatically’ is closed to new replies.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

 * 2 replies
 * 2 participants
 * Last reply from: [wfyann](https://wordpress.org/support/users/wfyann/)
 * Last activity: [8 years, 5 months ago](https://wordpress.org/support/topic/block-user-automatically/#post-9801103)
 * Status: resolved