• Resolved 1alanfo

    (@1alanfo)


    I keep getting messages like the one shown below from the same IP. Should I manually block it? Should I report it to Wordfence?

    …..

    This email was sent from your website “XXXXXX” by the Wordfence plugin at Tuesday 10th of November 2015 at 09:49:50 PM
    The Wordfence administrative URL for this site is: xxxxxxxxx
    A user with IP address 151.80.41.241 has been locked out from the signing in or using the password recovery form for the following reason: Exceeded the maximum number of login failures which is: 3. The last username they tried to sign in with was: ‘admin’
    User IP: 151.80.41.241
    User hostname: ns398047.ip-151-80-41.eu
    User location: Roubaix, France

    NOTE: You are using the free version of Wordfence. Upgrading to the paid version of Wordfence gives you
    two factor authentication (sign-in via cellphone) and country blocking which are both effective methods to block attacks.
    A Premium Wordfence license also includes remote scanning with each scan of your site which can detect
    several additional website infections. Premium members can also schedule when website scans occur and
    can scan more than once per day.

    As a Premium member you also get access to our priority support system located at http://support.wordfence.com/ and can file
    priority support tickets using our ticketing system.

    https://ww.wp.xz.cn/plugins/wordfence/

Viewing 1 replies (of 1 total)
  • Plugin Author WFMattR

    (@wfmattr)

    Yes, for IPs that come back again and again, you can manually block them to prevent the emails about blocking, and to prevent them from trying even a few passwords when the temporary blocking expires.

    If you have the option “Participate in the Real-Time WordPress Security Network” enabled on the Wordfence Options page, then abusive IPs are automatically reported and combined with the reports from other sites, for added protection.

    Thanks!

    -Matt R

Viewing 1 replies (of 1 total)

The topic ‘Wordfenceuser lock out’ is closed to new replies.