Title: Immediately Block Users …
Last modified: November 10, 2018

---

# Immediately Block Users …

 *  Resolved [psamathe](https://wordpress.org/support/users/psamathe/)
 * (@psamathe)
 * [7 years, 7 months ago](https://wordpress.org/support/topic/immediately-block-users/)
 * (Sorry, another question).
    I’ve configured in a load of usernames for “_Immediately
   block the IP of users who try to sign in as these usernames_“. Previously none
   of these usernames existed and now I’ve adjusted the config those non-existing
   users listed are being blocked with a big red icon in Live Traffic.
 * But there is now a username in the config that does exist and that is not being
   blocked.
 * Config [https://psamathe.eu/Temp%20Images/Nov%202018/ac3.png](https://psamathe.eu/Temp%20Images/Nov%202018/ac3.png)
 * Normal non-existing username block msg in Live Traffic [https://psamathe.eu/Temp%20Images/Nov%202018/ac4.png](https://psamathe.eu/Temp%20Images/Nov%202018/ac4.png)
 * Live traffic for configured “Immediate block …” user where the username does 
   exist [https://psamathe.eu/Temp%20Images/Nov%202018/ac2.png](https://psamathe.eu/Temp%20Images/Nov%202018/ac2.png)
 * Where the username does exist it is not causing a block but just recorded as 
   a login fail (as the hackers don’t know the password).
 * Extended protection is enabled (where Wordfence runs “early”?)
 * Have I misunderstood something or is Wordfrence allowing existing user logins
   to bypass the “Immediately block” checks?
    -  This topic was modified 7 years, 7 months ago by [psamathe](https://wordpress.org/support/users/psamathe/).

Viewing 1 replies (of 1 total)

 *  [wfdave](https://wordpress.org/support/users/wfdave/)
 * (@wfdave)
 * [7 years, 7 months ago](https://wordpress.org/support/topic/immediately-block-users/#post-10866717)
 * Hi again [@psamathe](https://wordpress.org/support/users/psamathe/) 🙂
 * You shouldn’t add usernames of existing accounts into the blacklist.
 * [https://www.wordfence.com/help/firewall/brute-force/#lockout-usernames](https://www.wordfence.com/help/firewall/brute-force/#lockout-usernames)
 * `Make sure that the usernames you add to this list are not identical to real 
   usernames on your system`
 * I forget exactly what happens, but I think in the worse-case scenario, legitimate
   users won’t be able to access their account.
 * If you’re worried about attackers from a certain range of IPs, I would recommend
   looking at this site.
 * [https://www.wordfence.com/help/blocking/#custom-pattern](https://www.wordfence.com/help/blocking/#custom-pattern)
 * (Scroll down to `How to block a range of IP addresses`)
 * Dave

Viewing 1 replies (of 1 total)

The topic ‘Immediately Block Users …’ is closed to new replies.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [wfdave](https://wordpress.org/support/users/wfdave/)
 * Last activity: [7 years, 7 months ago](https://wordpress.org/support/topic/immediately-block-users/#post-10866717)
 * Status: resolved