Title: Blocking Users Last modified: July 28, 2020 --- # Blocking Users * Resolved [tcartr07](https://wordpress.org/support/users/tcartr07/) * (@tcartr07) * [5 years, 10 months ago](https://wordpress.org/support/topic/blocking-users-5/) * I have been testing this for a while now and I am no expert with WP I am a novice to be clear but the plugin is causing regular members to rack up offences as I see on the IP list and eventually it blocks them. These are regular users who are not hacking the site or doing anything that their IP should be getting these flags and eventually blocked when the offences reach the limit. * I have no idea to even see what these offences might be that are eventually causing these users to get blocked then I have to clear their IP? Viewing 7 replies - 1 through 7 (of 7 total) * Plugin Support [Jelena](https://wordpress.org/support/users/jmisic/) * (@jmisic) * [5 years, 10 months ago](https://wordpress.org/support/topic/blocking-users-5/#post-13181532) * Hi, * Sorry to hear about the trouble you’re having. We’re here to help, however we can. * Whenever you or your users are getting blocked by Shield, best is to review your audit trail. It’ll tell you what exactly have happened, and you’ll know the possible reason of the block. Then, you can resolve the problem easily. This is how to use audit trail: [https://icontrolwp.freshdesk.com/support/solutions/articles/3000070244](https://icontrolwp.freshdesk.com/support/solutions/articles/3000070244) * Please feel free to pick up one of the IP addresses of the users that are getting blocked, filter audit trail logs by that IP address and let us know what results you get. It would be great if you could provide a screenshot. * This is an example screenshot (logs filtered by IP and audit log results for this IP): [https://www.screencast.com/t/fj6AkDkCM](https://www.screencast.com/t/fj6AkDkCM) * Thanks. * Thread Starter [tcartr07](https://wordpress.org/support/users/tcartr07/) * (@tcartr07) * [5 years, 10 months ago](https://wordpress.org/support/topic/blocking-users-5/#post-13183286) * Thank you for your reply and no worries this is a good program that I am liking so far, all the reviews can’t be wrong. Any problem I am sure there are a solution and thanks for explaining this to me and now I know how to search this out. * If you need more info let me know but all the IPs I checked and these reasons are shown for all either the first or the second. * Listed below are the Offenses these members are getting ding for seems all around the login * User “DarthMaul” attempted “login” but Bot checkbox was not found. Attempted user login by “DarthMaul” was successful. Auto Black List offenses counter was incremented from 2 to 3. * 404 detected at “/pm_login/tact.gif”. * Plugin Support [Jelena](https://wordpress.org/support/users/jmisic/) * (@jmisic) * [5 years, 10 months ago](https://wordpress.org/support/topic/blocking-users-5/#post-13184631) * Hi, * Firstly, happy to hear that you like Shield. 🙂 * Thanks for being so very cooperative and for providing additional info about the problem. * The audit trail entry you provided for this user is telling us the following: * 1) 1st login attempt failed. User did not check the “I’m a human” checkbox. This triggered Shield offense. * 2) 2nd login attempt: He checked the checkbox and managed to login successfully. * What you could try doing is set the Failed Login to “log” instead of incrementing offenses, until you can fully ascertain what’s happening so folk don’t get blocked. [https://www.screencast.com/t/JP1fxS8gg](https://www.screencast.com/t/JP1fxS8gg) Maybe they forget to check this bot checkbox, or maybe it isn’t showing for them at some point. You’ll need to investigate this… * _404 detected at “/pm\_login/tact.gif”_ means that user tried to load a non- existent page. * You can set this block to “log” only as well (if not already). [https://www.screencast.com/t/z4a1SW8kDz](https://www.screencast.com/t/z4a1SW8kDz) This will ensure that your users are not get blocked when they hit the 404s. You can also review this page, because this can be a non-existent page or legitimate link on your site that is 404. * Hope this helps. * We’ll be here for any further help you may need. * Thanks. * Thread Starter [tcartr07](https://wordpress.org/support/users/tcartr07/) * (@tcartr07) * [5 years, 10 months ago](https://wordpress.org/support/topic/blocking-users-5/#post-13186264) * Thank you, I am sure that will solve the problem I am having. * Thread Starter [tcartr07](https://wordpress.org/support/users/tcartr07/) * (@tcartr07) * [5 years, 10 months ago](https://wordpress.org/support/topic/blocking-users-5/#post-13224570) * I am still having some issues that are likely site-specific as many use this plugin with no issues. * My users are now not able to login, I can I assume because my IP is whitelisted when user login they just get the error you must be login…nothign happens. * I just had to turn off the entire login protection so user can login. * The same issue as I mentioned before the audit show this. * User “*****” attempted “login” but Bot checkbox was not found. Attempted login failed by user “******”. Auto Black List offenses counter was incremented from 0 to 1. * It continues to count them as offenses but I have set that to log as instructed so it is not blocking users now after the limit is reached. * The one issued mentioned bot checkbox was not found? not sure what that is I am not using captcha, also I use a custom login URL because I use a membership plugin. * I have been evaluating now for a while and would like to go pro but these issues are a roadblock if I can get them solved? * Plugin Support [Jelena](https://wordpress.org/support/users/jmisic/) * (@jmisic) * [5 years, 10 months ago](https://wordpress.org/support/topic/blocking-users-5/#post-13231123) * Hi, * Thanks for the update. * You’re not affected because you have whitelisted your IP. * The checkbox in-question here is a checkbox that is automatically inserted into the WordPress login form. (“I’m a human” checkbox) * Shield is founded on using standard WordPress API/hooks/filters. If you are using a custom login form that doesn’t use these standards, then it’s possible that the form doesn’t fire the necessary WordPress hook that allows us to insert the checkbox. * Since you’re using a custom login form, this is why this checkbox isn’t present. * You have 2 options: * 1) Turn off the Bot Protection option within the Login Guard module since your custom login form doesn’t support it [https://www.screencast.com/t/GlUUv1v5h](https://www.screencast.com/t/GlUUv1v5h) * 2) Or, don’t use a custom login plugin/theme or use one that supports standard WordPress login hooks. * Hope this helps. * Thread Starter [tcartr07](https://wordpress.org/support/users/tcartr07/) * (@tcartr07) * [5 years, 10 months ago](https://wordpress.org/support/topic/blocking-users-5/#post-13232998) * Thank you. Viewing 7 replies - 1 through 7 (of 7 total) The topic ‘Blocking Users’ is closed to new replies. * ![](https://ps.w.org/wp-simple-firewall/assets/icon-256x256.png?rev=3054572) * [Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning](https://wordpress.org/plugins/wp-simple-firewall/) * [Frequently Asked Questions](https://wordpress.org/plugins/wp-simple-firewall/#faq) * [Support Threads](https://wordpress.org/support/plugin/wp-simple-firewall/) * [Active Topics](https://wordpress.org/support/plugin/wp-simple-firewall/active/) * [Unresolved Topics](https://wordpress.org/support/plugin/wp-simple-firewall/unresolved/) * [Reviews](https://wordpress.org/support/plugin/wp-simple-firewall/reviews/) * 7 replies * 2 participants * Last reply from: [tcartr07](https://wordpress.org/support/users/tcartr07/) * Last activity: [5 years, 10 months ago](https://wordpress.org/support/topic/blocking-users-5/#post-13232998) * Status: resolved