If I manually enter xxx.xxx.xxx.123 using the “add ban” function, in another day or three that IP address is popping back up as an attacker. I have tried modifying the time parameters on the bans (minding the warning texts about the ramifications of doing so) but they keep popping up again and again. I am getting very tired of playing whack-a-mole here.
Is there some magical combination of settings that I am not understanding / using that will make these bans 100% permanent?
Thank you for any and all light you can offer up to a noob security warrior trying to hold back the forces of darkness, and protecting our humble little website.
I was testing your plugin on my site alongside Jetpack. I have the Enable xml-rpc for Jetpack setting turned on, but the connection is still breaking. I tried adding all the IP addresses found here (it’s a long list!) to the White list IPs section and that fixed the issue.
Is there any plans to update this so that the setting allows all Jetpack IP addresses?
]]>This is because we do not have fixed IP address for the office. However, we can populate our dynamic IP address to cPanel Dynamic DNS.
Example:
Allowlisted IP addresses that bypass all rules
x.x.x.x
myoffice.dynamic.ip
Will you incorporate this in?
Thanks and regards.
Johnny
]]>My question is, if I enable “Immediately block the IP of users who try to sign in as these usernames” for the username “admin”, how does that work with regard to not accidentally blocking my legitimate IP addresses?
What I mean is that MY own legitimate logins usually show up as Amazon Web Services IP address (various ones all the time), so If I block those attempted fraudulent admin logins, isn’t there a decent chance that MY IP address ends up getting blocked too? (since it may be the same amazon web services IP address from time to time)
Hope that question makes sense!
]]>At the moment I have de-activated the spam blocker plugin, so mailpoet is now working, but I would like to get spam plugin up and running again asap.
Thanks.
]]>Does anybody know?
]]>I used to use WordFence, but after some recent court rulings and the fall of the privacy shield, I do not want to take the risk of transmitting IP addresses or hostnames outside of the EU. So I would like to ask whether there is a way to use WordFence without any personal data being, without IP addresses and without hostnames being transmitted outside of one’s webspace? (And if they are stored only there, whether and how it is possible to delete them?)
I loved the scanning abilities of WordFence. Could I still use them, without any data transmission to servers outside of my own taking place
]]>