I was stilled logged in with another device on another IP I looked into the dashboard for any blockes, but there were none – even in the database itself I could find any entries within the related tables.

After some time the timeout from my site resolves, but I have to deactivate the plugin via FTP, so I can surpass the MFA-setup…

Has anyone else had similar problems and could resolve them or has any idea what could trigger this phenomenon?

My server using CSF Firewall and Cloudflare.

Do I need to add the IPs of your anti-spam server to firewall whitelist so that they can work properly?

Immediately block the IP of users who try to sign in as these usernames

This is very useful, but I receive lots of attempts from a unique domain, with different usernames, eg.

[email protected]
[email protected]
[email protected]
etc.

Is there any way to block users from a particular domain?

I hope this message finds you well.

I am reaching out from Clerk.io, where we provide an e-commerce personalization tool compatible with various platforms, including WordPress.

As part of our plugin’s functionality, we require the ability to sync product data. However, we are encountering an issue where our importer appears to be blocked while attempting to sync products for one of our clients.

When doing an Insomnia/Postman call, we get the following message:
555 Security Incident Detected
Your request was blocked.

If you are the owner of the website:
The Website Application Firewall that is protecting your website has blocked this request for being suspicious.

You can see the detailed reason for this in your webserver logs.

If you are the visitor:
The public IP address assigned to you, by your internet provider, might be suffering from poor reputation: Look up IP reputation here. IP addresses from VPN providers or public networks often have poor reputation.

We have added our importer IP to the whitelist, however, it still seems to be failing. Can you please help us understand why this is happening and how we can avoid this in the future?

Thanks,
Matei

I am the technical manager for the infrastructure at Turbocloud (turbocloud.com.br), and we are facing a problem with one of our servers. Requests made by the server https://br.yavin4846.com.br/, whose IP is 177.154.191.198, are being blocked by www.ads-software.com.

This block is directly impacting several more customers in our database, and we would like to request the release of the aforementioned IP so that we can resume normal service operations.

Thank you for your attention and I look forward to hearing from you as soon as possible.

Best regards,
Hugo Marinho Silva
Technical Manager – Turbocloud

/**
 * Filter user IP to check if it is whitelisted.
 * For whitelisted IPs, hCaptcha will not be shown.
 *
 * @param bool   $whitelisted Whether IP is whitelisted.
 * @param string $ip          IP.
 *
 * @return bool
 */
function my_hcap_whitelist_ip( $whitelisted, $ip ) {

  // Whitelist local IPs.
  if ( false === $ip ) {
    return true;
  }

  // Whitelist some other IPs.
  if ( '1.1.1.1' === $ip ) {
    return true;
  }

  return $whitelisted;
}

add_filter( 'hcap_whitelist_ip', 'my_hcap_whitelist_ip', 10, 2 );

Issue is that, this code does not hide hCaptcha from the from but just allows the submission without attempting it. ( Form submits without any issues even if you don’t attempt hCaptcha ).
We want it to be hidden as it actually gets hidden when we add IP address manually in the whitelist settings field.
Thanks!