Hi @ayam1,
I tried logging into your site as an invalid user more than 5 times and was unable to receive blocking messages so I don’t think it’s down to brute force, wrong IP detection, or locking out invalid username settings at this stage. Issues like this can also arise if 2FA or reCAPTCHA is active under certain conditions, but that doesn’t look like the case here either.
Are you able to log in as a site admin without experiencing the same blocks? If so, from the Wordfence Dashboard click on Manage WAF. Then you will see Basic Firewall Options > Web Application Firewall Status. Change the option to Learning Mode. Now can you try signing in as a regular site user during this time? This will help Wordfence learn that any actions during this time are normal and it will allow them in the future. After you have successfully signed in as a user, switch the WAF from Learning Mode back to Enabled and Protecting. Now test to see if this continues to work correctly for your users.
https://www.wordfence.com/help/firewall/learning-mode/ is an amazing resource for learning more about the WAF and learning mode.
If the above doesn’t work, can you please let me know if all clients are experiencing this, or whether there are a few specific examples depending on location or another factor.
Thanks,
Peter.
