Hi @agentx42, thanks for reaching out to us.
Firstly, if you’re unable to log in you can rename your /wp-content/plugins/wordfence plugin folder to “wordfence_bak” and logging into your site using your username/password combination.
I would normally think that there could be a false-positive thrown with some PHPBB functions but Learning Mode should be turned on already if Wordfence is newly installed. Follow the link to read more about it just in case this has been disabled in error. You can also check the Live Traffic page to see what reason the firewall is giving for the blocks and click the “ADD PARAM TO FIREWALL ALLOWLIST” if you see something from PHPBB in there – which may also solve this.
However, due to you and other visitors being blocked I’m swaying towards perhaps IP detection being wrong on your site so that when one person is blocked, it results in everybody being blocked. This is sometimes because the site is detecting its own IP, or a load-balancer/firewall instead of the visitor.
To double-check your IP detection is correct, first, check the following site and take note of your IP – (note that this detection can sometimes not be 100% accurate on cellular phone network connections): https://www.whatsmyip.org.
Then, head over to your site and go to Wordfence > All Options > General Wordfence Options > How does Wordfence get IPs and reference the area under that section that says Detected IPs and Your IP with this setting. Start from the top and check to see if any of the settings show that both of those show the same IP as the site above does.
If you’re using Cloudflare, you will most likely need to select “Use the Cloudflare “CF-Connecting-IP” HTTP header to get a visitor IP. Only use if you’re using Cloudflare.”.
Let me know how you get on!
Peter.
