Wordfence is blocking me alot.. the admin

Hi @majito, thanks for reaching out to us.

It’s not the normal situation for the default Wordfence settings to be so strict that they would regularly block the administrative user. It’s also not recommended to ever allowlist IPs to bypass Wordfence – unless unavoidable – as this could allow an attacker to go unchecked when IPs are reassigned.

I think it’s worth checking whether you’re being blocked due to incorrect IP detection. Take note of your own IP – (note that this detection can sometimes not be 100% accurate on cellular phone network connections): https://www.whatsmyip.org

Then head over to Wordfence > All Options > General Wordfence Options > How does Wordfence get IPs and reference the area under that section that says Detected IPs and Your IP with this setting. See if any of the options there when picked accurately reflect your IP. If one does, don’t forget to hit the SAVE CHANGES button in the top-right after you’re done.

Also make sure that settings like Wordfence > All Options > Brute Force Protection > Immediately lock out invalid usernames are off for now to avoid overly strict blocking if usernames are mistyped or unclear.

Let me know how you get on,
Peter.

about this, i didn’t understand:

Then head over to?Wordfence > All Options > General Wordfence Options > How does Wordfence get IPs?and reference the area under that section that says?Detected IPs?and?Your IP?with this setting. See if any of the options there when picked accurately reflect your IP. If one does, don’t forget to hit the?SAVE CHANGES?button in the top-right after you’re done.

i found the id but what after that?

Immediately lock out invalid usernames?are off… i turn it off

Hi @majito, thanks for your response.

If the IP you detected for yourself matches a new option in “How does Wordfence get IPs”, then save that to prevent incorrect IP detection in future.

Thanks,
Peter.

hi, there is 2 options for proxy.. i use ezoic proxy,, which one should i use?

i’m using now :??Use the X-Forwarded-For HTTP header. Only use if you have a front-end proxy or spoofing may result.

it has correct ip

the deafult :??Let Wordfence use the most secure method to get visitor IP addresses. Prevents spoofing and works with most sites.?(Recommended)

was catching wrong ip

edit: i found a notuce on wp settings that it’s not suitable for my site to use that settong as i have back not fronted or something like that so i changed it to: ??Use the X-Real-IP HTTP header. Only use if you have a front-end proxy or spoofing may result.

the notice is gone now

like that is everything alright with me.. will i be blocked again?

should i turn on this: Immediately lock out invalid usernames? .. on again? or keeping it off?

• Details: A test request to this website was detected on a different value for this setting. IP blocking and live traffic information may not be accurate. Get More Information(opens in new tab) This site appears to be behind a front-end proxy, so using the X-Real-IP HTTP header will resolve to the correct IPs.

that is on scan log

everything is good now, thanks