Wordfence blocking normal (not login) pages

  • Hi,
    Suddenly, Wordfence has been blocking users from seeing normal pages on this website.
    I’ve been notifying about a few users who faced this problem and when I tried to visit the contact page, I had the same issue: “Block Reason: Blocked by login security setting”.
    How can I sort this issue and also prevent this from happening?
    I already regained access and used the option to unblock all IP addresses, but not sure if this solves the issue for other non admin users.
    Thanks

    • This topic was modified 8 months, 3 weeks ago by rafaelmiura.
    • This topic was modified 8 months, 3 weeks ago by rafaelmiura.

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @rafaelmiura, thanks for reaching out about this!

    This is interesting because I saw a similar issue reported yesterday, and although it could be a coincidence I won’t rule out something having changed at a specific host or another factor causing the issue.

    “Blocked by login security setting” is only usually seen as a reason when the username being attempted has been added to Wordfence > All Options > Brute Force Protection > Immediately block the IP of users who try to sign in as these usernames. Do you have anything set there?

    Thanks,
    Peter.

    Thread Starter rafaelmiura

    (@rafaelmiura)

    Hi @wfpeter
    Thanks for your reply.
    I do have usernames blacklisted, but only ‘admin’ and ‘the99people’.
    Please let me know your thoughts and if there is anything I could do for the moment to prevent this from happening again, while the issue is being investigated.
    Cheers!
    Rafael

    Plugin Support wfpeter

    (@wfpeter)

    Hi @rafaelmiura,

    Would you be able to temporarily remove any usernames from that setting to see if the issue stops occurring? It would be strange if normal operations on the site were detected as being from “admin”, etc. to cause that block, so if you put those usernames back and it starts occurring again, we may be able to look into the blocks a little more closely for you.

    If you could take an expanded Live Traffic entry screenshot showing the block, we should be able to see the path or action that was being attempted when the block occurred. You can censor the domain itself for security reasons if you like, but please leave the rest of the path visible.

    Thanks,
    Peter.

    Thread Starter rafaelmiura

    (@rafaelmiura)

    Hi @wfpeter
    Sure. I just removed all usernames from the block list and here is the screenshot:
    https://drive.google.com/file/d/1H8SjpjFlWWjoTI0qb8u5eaEzbWf8TNVZ/view?usp=sharing

    I put a few of the blocking issues I’m talking about and if you need any further information, just let me know. Since it is still going on, I’ll check for a couple of hours to see if it stops now that I removed the usernames and if it doesn’t, I might have to deactivate wordfence. If you have any other suggestions, please let me know.

    Thanks

    Thread Starter rafaelmiura

    (@rafaelmiura)

    Hi?@wfpeter
    Just checking if you have any update on this.
    Cheers!

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Wordfence blocking normal (not login) pages’ is closed to new replies.