• Resolved simonegaio

    (@simonegaio)


    I’m receiving some emails of a user that has been locked out from the signing in, for exceeded the maximum number of login failures. The username used was every time different, from “administrator” to something else..
    The problem is that this user has always the SAME IP ADRESS and hostname of the server where my site is stored in, causing that no one can login into the site and everybody are looked out..

    Any suggestion for it? Thanks

Viewing 7 replies - 1 through 7 (of 7 total)
  • wfalaa

    (@wfalaa)

    Hi,
    I don’t think Wordfence is getting the correct IPs in this case, please make sure you selected the correct option for “How does Wordfence get IPs” from (Wordfence > Options), you can confirm that by reloading your website -while not logged in- (from Chrome incognito window for example) then check (Wordfence > Live Traffic) and make sure your correct IP address is shown there.

    You may need to change the method by which Wordfence gets IPs to the one that suits your server configuration.

    Let me know how it goes,
    Thanks.

    • This reply was modified 8 years ago by wfalaa.
    queirozx

    (@queirozx)

    I′m having a similar problem :

    After the last update of the plugin my administrator access was blocked … I put my email to receive instructions for unlocking but I do not get … FTP access and delete the plugin folder and nothing … please help

    I still do not have Access to the site

    • This reply was modified 8 years ago by queirozx.
    wfalaa

    (@wfalaa)

    @queirozx thanks for opening a new support thread for your question following the forums rules, I’ve just replied to your post, so let’s follow up there.

    Thanks.

    Thread Starter simonegaio

    (@simonegaio)

    Hi,
    i’ve try all the options on the “How does Wordfence get IPs”.. Nothing’s changed.. When i load a page, i see all the visitors, and also me, has always the same ip address (the ip of my site)..

    • This reply was modified 8 years ago by simonegaio.
    wfalaa

    (@wfalaa)

    Hi @simonegaio,
    If you are sure that none of these options is working, then please go to (Wordfence > Diagnostics) and scroll down the page till “Send Report by Email” and send the report to “alaa [at] wordfence [dot] com”, make sure to include your forum username, I will take a look at this report and let you know my findings.

    Thanks.

    wfalaa

    (@wfalaa)

    @simonegaio I’ve checked the diagnostic report and I can see “X-Forwarded-For” header is set at “IPs” section there, so that’s the option you should choose.

    I suggest disabling “Varnish HTTP Purge” plugin then go through these steps again.

    Let me know how it goes,
    Thanks.

    Thread Starter simonegaio

    (@simonegaio)

    Done everything, it works!
    Thank you so much!!

    Kind regards

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘User locked out from signing in, but the IP is the same of the site’ is closed to new replies.