Admin & users blocked

Are users being blocked or locked out? Can you attach a screenshot of the blocked message you see when you tried to register?

Tim

Will send a screen shot when blocked again. For now this is the email received blocking me from registering as a new user. My IP should never be blocked.

WordPress <[email protected]>
Wed, Dec 12, 9:17 PM (2 days ago)
to President

This email was sent from your website “Maine Chapter – Freedom from Religion Foundation” by the Wordfence plugin at Wednesday 12th of December 2018 at 09:15:46 PM
The Wordfence administrative URL for this site is: https://ffrfmaine.org/wp-admin/admin.php?page=Wordfence
A user with IP addr 74.75.102.22 has been locked out from signing in or using the password recovery form for the following reason: Used an invalid username ‘Imagine’ to try to sign in.
The duration of the lockout is 2 months.
User IP: 74.75.102.22
User hostname: cpe-74-75-102-22.maine.res.rr.com
User location: Augusta, United States

Discovered a work around – Manually add a new user, send them a notice and let them approve the registration by changing the default password.

This says you were blocked because you used an invalid username to sign in. The username was imagine. Can you verify that the user name exists? How many attempts do you allow before someone is locked out?

Tim

Please explain. I think it says I couldn’t even register because a wrong user name was entered. I have no username restrictions. Others in our chapter can not register for the same reason.

It said this
“A user with IP addr 74.75.102.22 has been locked out from signing in or using the password recovery form for the following reason: Used an invalid username ‘Imagine’ to try to sign in.”

Are you saying that the username you just registered was Imagine?

Tim

Yes, and just got this email. The person is a member of the chapter who was manually registered but to complete the registration the random password needs to be changed. They did that but their IP address got blocked. Why?

WordPress <[email protected]>
2:35 PM (4 hours ago)
to President

This email was sent from your website “Maine Chapter – Freedom from Religion Foundation” by the Wordfence plugin at Friday 14th of December 2018 at 02:35:54 PM
The Wordfence administrative URL for this site is: https://ffrfmaine.org/wp-admin/admin.php?page=Wordfence
Someone tried to recover the password for user with email address: [email protected]
User IP: 65.96.xx.3xx
User hostname: c-65-96-xx-xx.hsd1.me.comcast.net
User location: Topsham, United States

Everyone is experiencing this problem. Please advise

Sorry, this is the email notice blocking the IP of someone I manually registered.

WordPress <[email protected]>
2:44 PM (5 hours ago)
to President

This email was sent from your website “Maine Chapter – Freedom from Religion Foundation” by the Wordfence plugin at Friday 14th of December 2018 at 02:44:55 PM
The Wordfence administrative URL for this site is: https://ffrfmaine.org/wp-admin/admin.php?page=Wordfence
Wordfence has blocked IP address 65.96.xx.xx.
The reason is: “Exceeded the maximum global requests per minute for crawlers or humans.”.
The duration of the block is 1 month.
User IP: 65.96.xx.xx
User hostname: c-65-96-xx-xx.hsd1.me.comcast.net
User location: Topsham, United States

It seems to register someone the following must be done:

Manually register someone with a random password
Have them change the password
Get a notice from WF the person’s IP was blocked
Whitelist the blocked IP
Ask the person to register / sign in again
Wait to see if WF will let the person in.

What should happen:

Person registers
I get a notice and activate the registration
All done

Why does this not happen?

Thanks for your continued help.

OK, so I get this email that someone living in Clifton, USA has been blocked. How am I to know this is from a legit person living in Clifton, Maine, and I can safely approve the registration, or if this person lives in Clifton, NJ, VA or any other Clifton in the USA?

WordPress <[email protected]> 12:17 PM (3 hours ago) to President

This email was sent from your website “Maine Chapter – Freedom from Religion Foundation” by the Wordfence plugin at Saturday 15th of December 2018 at 12:17:15 PM
The Wordfence administrative URL for this site is: https://ffrfmaine.org/wp-admin/admin.php?page=Wordfence
Wordfence has blocked IP address 159.203.104.253.
The reason is: “Exceeded the maximum global requests per minute for crawlers or humans.”.
The duration of the block is 1 month.
User IP: 159.203.104.xxx
User hostname: 159.203.104.xxx
User location: Clifton, United States

This message indicates your rate limiting rules is what is blocking them now.

“Exceeded the maximum global requests per minute for crawlers or humans.”

Depending on links on the site to resources (like images, etc) you may just have them set too low. Can you post a link to a screenshot of your rate limiting rules?

Tim

Thank you so much,

I read and set the rate limiting to the recommended settings.

If I have any other problems I will post here.

Thanks again.