Immediately Block Users …

(Sorry, another question).
I’ve configured in a load of usernames for “Immediately block the IP of users who try to sign in as these usernames“. Previously none of these usernames existed and now I’ve adjusted the config those non-existing users listed are being blocked with a big red icon in Live Traffic.

But there is now a username in the config that does exist and that is not being blocked.

Config https://psamathe.eu/Temp%20Images/Nov%202018/ac3.png

Normal non-existing username block msg in Live Traffic https://psamathe.eu/Temp%20Images/Nov%202018/ac4.png

Live traffic for configured “Immediate block …” user where the username does exist https://psamathe.eu/Temp%20Images/Nov%202018/ac2.png

Where the username does exist it is not causing a block but just recorded as a login fail (as the hackers don’t know the password).

Extended protection is enabled (where Wordfence runs “early”?)

Have I misunderstood something or is Wordfrence allowing existing user logins to bypass the “Immediately block” checks?

• This topic was modified 6 years, 4 months ago by psamathe.