• Resolved amedic

    (@amedic)


    For the past week I’m getting dozens of emails for one of my sites.

    Whoever is doing this he is using 3 generic usernames and trying to login to my site for the several days now.

    I’m using this option:
    “Immediately block the IP of users who try to sign in as these usernames”

    Is there anything else I can do?

Viewing 4 replies - 1 through 4 (of 4 total)
  • Hi @amedic,

    Another thing you can try is blocking the IP range of this user.

    Can you check Wordfence -> Tools -> Live Traffic, to see if the person trying this is using similar IPs or is it all random IPs?

    Dave

    Tom

    (@chapteradmin)

    I have the opposite problem but didn’t see a way to post a new question.

    I am the admin of https://ffrfmaine.org but often get locked out. People I know can’t register. Had to whitelist one person’s IP address to let them register / log in.

    Am registered as Admin and as a user, both from the same IP address, but just tried to register as a new user with a unique email but from the same IP address and got blocked.

    Need a way to let legit users to register / log in and block spam, bots etc.

    Thread Starter amedic

    (@amedic)

    Hi @wfdave, thank you for answering.
    It is no use.
    Script is using a proxy and every time it is trying from a different ip address.

    Hi again!

    Unfortunately there is nothing you can do if an attacker is constantly changing their IP address.

    What you can try is banning the usage of any invalid username, by going into Wordfence -> All Options.

    Example: https://i.imgur.com/LVgvwII.png

    Dave

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘User is locked out from signing in’ is closed to new replies.