Wordfence –

  • Resolved pg-fun

    (@pg-fun)


    5 years, 6 months ago

    its not so much a support / help question
    sent an email to feeback@wordfence askign about a suggestion

    Using Free Version:
    Immediately block the IP of users who try to sign in as these usernames

    The Username list and drop down only goes to 2 months…

    Wondered if free version could just block
    as it does for usernames – to stop repeat users e.g. “admin” being used and not blocked immediately..

    You will probably advise that the paid for version does this already?

    regards
    Paul

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter pg-fun

    (@pg-fun)

    5 years, 6 months ago

    also or Immediately lock out invalid usernames
    max i can do in free version if 2 months

    but brute force attackers use admin a lot as username –
    so wondered if can be blocked / locked out for ever – not just 2 months

    you might say if similar to a real logon dont want them locked out – but for me i am the admin of all the sites and my logons usernames are not even close to spelling etc.. – so i think unlikely to lock out accidently.

    my username list includes a number of variations on admin that have been used / tired on my sites.

    makes sense

    WFSupport

    (@wfsupport)

    5 years, 6 months ago

    Thanks for reaching out. The option to Immediately block the IP of users who try to sign in as these usernames is blocking them for any time someone tries to login as a blocked name. If you added the username ‘admin’ every attempt to login with the username ‘admin’ will be blocked regardless of how long the drop down says. The drop down you are referring to only governs login failures and forgotten password attempts. Even if the blocked username feature only blocked the IP for 2 months, wouldn’t the IP get blocked again when it tried to login as ‘admin’?

    Tim

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Wordfence –’ is closed to new replies.