• Resolved jgold723

    (@jgold723)


    Wordfence is locking me out before I’ve even tried to login. as soon as I go to mysite.com/wp-admin I get a lockout message (with no option to clear it). I haven’t tried logging in for weeks, so this isn’t the result of a failed login recently.

    I’ve tried disbling WF via FTP and reinstalling… same problem.

    What’s going on?

    It’s not just my IP — I started checking this because I was receiving notices that others were locked out as well.

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @jgold723, thanks for getting in touch with us.

    You will need to install the Wordfence Assistant Plugin after once again renaming your Wordfence plugin folder via FTP to regain access to your site.

    Once downloaded, you can use the tool to deactivate the firewall, which will keep you from being blocked once Wordfence is renamed in FTP and turned back on. This will NOT disable the part of the firewall that is blocking exploits.

    Once Wordfence is activated again, find your public facing IP address at: https://www.whatsmyip.org/

    Unblock your IP on the Firewall > Blocking page (you can search for the IP using the advanced filters)

    If you can’t find your IP there, then take a look at Live Traffic to see if all logins and logouts seem like they have the same IP address.

    If they do, look at Wordfence Dashboard > Global Options > General Wordfence Options > How does Wordfence get IPs and cycle through the options there until it displays the IP address you discovered on https://www.whatsmyip.org/. That will be the setting you need to use going forward, so click the SAVE button once you’re done.

    Let me know how you get on.

    Thanks,

    Peter.

    Thread Starter jgold723

    (@jgold723)

    Hi Peter:

    Thanks for the suggestion. I was able to install Wordfence Assistant and changed how Wordfence gets IPs. However, now I’m getting an error email from Wordfence that says that setting is not configured correctly:

    High Severity Problems:

    * ‘How does Wordfence get IPs’ is misconfigured

    Thread Starter jgold723

    (@jgold723)

    The other question is, why is WordPress getting my IP wrong?

    Plugin Support wfpeter

    (@wfpeter)

    Hi @jgold723,

    If the IP address (now that you’ve changed the setting) displays your public IP on Wordfence > Dashboard > Global options so that WordPress and Wordfence are showing it correctly we can change make one more change.

    Simply uncheck Wordfence > Scan > Configure Scan > General Options > Scan for misconfigured How does Wordfence get IPs to suppress the error emails. This is in place by default to protect people who have changed the recommended settings by mistake.

    Your IP was showing wrongly by default as the software your host installs on your server and how it is configured may not forward the client IP address properly.

    Thanks,

    Peter.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Locked out before even logging in?’ is closed to new replies.