IP LOCKED

Hi,

Sorry to hear about the trouble you’re having.

You can remove your IP from the blacklist instantly by using the ‘unblock’ file flag, and this is how to do that:
https://icontrolwp.freshdesk.com/support/solutions/articles/3000092024

If you’re getting blocked all the time, best is to use a “forceoff” file instead and then check your audit trail to find the problem cause.

To do that, please follow these steps:

1) Go to your FTP for this site and create a “forceoff” file by following the steps outlined here:
https://icontrolwp.freshdesk.com/support/solutions/articles/3000000959
2) Log into your site
3) Go to the IP Lists section of the Shield and remove your IP from the blacklist (if needed). Please see here how to do that:
https://icontrolwp.freshdesk.com/support/solutions/articles/3000072655
4) Go to your Audit Trail:
https://icontrolwp.freshdesk.com/support/solutions/articles/3000070244
It will help you to identify the problem cause. You may look for audit trail logs around the time you were getting blocked.
5) Change Shield settings based on the audit trail finding.

If you don’t know how to interpret audit trail logs, please feel free to send it to us and we’ll do that for you.

Thanks.

Jelena

Hi, I just tried this method and it is not working. Again got warning of IP BAN. Please help.

I created unblock file, forceoff file and then even renamed folder. Not working…. ??

Sorry to hear that. We’re here to help, however we can.

If you renamed plugin folder, that means that Shield is completely disabled. So, it looks like you’re getting blocked even if Shield is disabled…

Can you try forceoff once more, please?

Go to your FTP => wp-content => plugins => wp-simple-firewall (this is the name of the Shield plugin folder) => create a “forceoff” file. Please see this screenshot:
https://www.screencast.com/t/ewAYD3VwXJ

Then, go to your site and check audit trail. Please do not remove this file, keep it active. Check your audit trail first and let us know what it says.

Thanks.

• This reply was modified 4 years, 5 months ago by Jelena.

Looks like FORCEOFF file is automatically turning into txt file? That’s why its not working?

Message I get:
You’ve been blocked by the Shield plugin
Time remaining on black list: 60 minutes
You tripped the security plugin defenses a total of 5 times making you a suspect.
If you believe this to be in error, please contact the site owner and quote your IP address below.

Yes, “forceoff” shouldn’t have any extension, anything, it’s just “forceoff”.

Thanks for the update.

Now, can you go to your audit trail and let me know what it says, please? Just look for logs around the time when you got blocked. This is how to use audit trail:
https://icontrolwp.freshdesk.com/support/solutions/articles/3000070244

Let me know what you find. This will help us to know the problem cause so we could provide best solution for you.

Thanks.

UPDATE> Even if I delete wp-simple-firewall folder from cpanel>File Manager, the error is showing.

I am not logged in yet so can not check audit trail

If you deleted wp-simple-firewall folder but the problem is still there, then it isn’t Shield. There must be something else then.

Do you have any other security plugin installed on this site, perhaps?

Wordfence,
WP Cerber
iThemes Security.

But the error is shown by Shield
Message I get:
You’ve been blocked by the Shield plugin
Time remaining on black list: 60 minutes
You tripped the security plugin defenses a total of 5 times making you a suspect.
If you believe this to be in error, please contact the site owner and quote your IP address below.

Update> Looks like plugin is causing serious problem. I just checked with another internet connection so that I can change IP address and I still get same notification. So it is happening from yesterday. I thought it will go away after 60 minutes, but looks like it is something more serious?

Can you tell shield plugin folder name?

Plugin folder name is wp-simple-firewall.

But the problem here is that your tried to disable or delete Shield completely from your site (via your File Manager) but the block is still there. This is not possible. You can’t get blocked by something that isn’t active/installed on your site…

You also tried forceoff, but if I understood well, this also wasn’t working?

All of these telling me that either you’re not forceoff/renaming/deleting plugin properly. or there is something else that’s causing this. It could be another plugin, IP source detection, etc. It could be anything.

At this point, it’s difficult to say what’s causing the block.

The only way to help you out is to see what you’re doing. Could I ask you to contact us directly here and record a short video of creating forceoff or renaming plugin folder, and send it to us, please?

Thanks.

I am doing exactly what’s in documentation. I have changed my login page from wp-login.php so it is on different URL. I tried every step provided by you. But still its not working.
It can be cache related because everytime it is the same message? >
You’ve been blocked by the Shield plugin
Time remaining on black list: 60 minutes
You tripped the security plugin defenses a total of 5 times making you a suspect.
If you believe this to be in error, please contact the site owner and quote your IP address below.

Okay, could you disable caching system/plugin and then forceoff to see what happens?

You mean delete cache folder? But it will affect Live site. I am still checking how ip is banned.