Hi @azizmars,
Wordfence doesn’t block based on device type, or network type (including VPNs) by design so it’d be helpful to see the block message at the user’s end as that may reveal which rule or setting is catching them.
You should be able to see block reasons as an admin on the?Live Traffic?page, which can be searched by IP or date range, or filtered by “Blocked” so it’s easier to find. Check the block reason (in red text) by expanding the entry using the eye icon in the corner.
If an IP is still blocked, you would be offered an “UNBLOCK IP” button in Live Traffic. If it’s returned to “BLOCK IP” (and you don’t see an IP on the blocking page any more) then the block has already been lifted. Some automatic blocks don’t ever show on the Wordfence > Blocking page as they’re being dealt with in real-time when hitting the site. Other users will be blocked for the amount of time specified in “Amount of time a user is locked out” in the Brute Force settings or “How long is an IP address blocked when it breaks a rule” in the Rate Limiting settings depending on the rule that was broken.
Certain?Brute Force?or?Rate Limiting?options could be too strict. For example, if most of these users are being blocked on login, we recommend?not?having?Wordfence > All Options > Brute Force Protection > Immediately lock out invalid usernames?checked as a simple typing error will result in a block.
Let us know what you find,
Peter.
