Wordfence not automatically locking out invalid users

  • Resolved octoberfields

    (@octoberfields)


    11 years ago

    Hi –

    Love the plugin and thinking of purchasing a key – however for the life of me I cannot get one feature I would love to have working:

    Wordfence refuses to lock out invalid user login attemps

    eg: someone can attempt to log in over and over with an invalid username and wordfence does not lock them out. I’ve looked over all my settings many times and cannot figure it out. Any suggestions would be helpful.

    I have the following plugins:
    BackUpWordPress Backup Plugin by Human Made Limited – 3.2.4
    Akismet by Automattic – 3.1.1
    Contact Form by BestWebSoft – 3.89
    Easy Theme and Plugin Upgrades by Chris Jean – 1.0.4
    WooCommerce – Gift Cards by WP Ronin – 1.7.1
    Google Captcha (reCAPTCHA) by BestWebSoft by BestWebSoft – 1.15
    MailChimp for WordPress Lite by Danny van Kooten – 2.2.9
    Ninja Forms by The WP Ninjas – 2.9.10
    Photo Gallery by WebDorado – 1.2.18
    Responsive Lightbox by dFactory – 1.4.10
    Shortcodes Ultimate by Vladimir Anokhin – 4.9.6
    SSL Insecure Content Fixer by WebAware – 1.8.0
    Taxonomy Metadata by mitcho (Michael Yoshitaka Erlewine), sirzooro – 0.4
    W3 Total Cache by Frederick Townes – 0.9.4.1
    WooCommerce PayPal Payments Advanced Gateway by Kiran P – 1.13
    WooCommerce PDF Invoices & Packing Slips by Ewout Fernhout – 1.5.10
    WooCommerce USPS Shipping by WooThemes – 4.2.1
    WooCommerce by WooThemes – 2.3.7
    WooThemes Helper by WooThemes – 1.5.3
    Wordfence Security by Wordfence – 5.3.11
    WordPress SEO by Team Yoast – 2.0.1
    WP Statistics by Mostafa Soufi & Greg Ross – 9.1.3
    WPFront User Role Editor by Syam Mohan – 2.9.1
    YITH WooCommerce Ajax Search by Yithemes – 1.2.7

    https://wordpress.org/plugins/wordfence/

Viewing 8 replies - 1 through 8 (of 8 total)
  • WFBrian

    (@wfbrian)

    11 years ago

    Hi,

    Wordfence locks out the user for the duration set in Options. The default time is 5 minutes. The block may be expiring before you look in the log. If you’re wanting to block someone permanently, you have to manually block them.

    You may also want to adjust how Wordfence gets IP addresses. Here is more info:

    http://docs.wordfence.com/en/Live_traffic#IP_Address

    -Brian

    Thread Starter octoberfields

    (@octoberfields)

    11 years ago

    Hi Brian – I have it set to lock out for 20 days, and I’m usually checking every 24-36 hours for unauthorized logins. Wordfence looks to be obtaining the IP’s correctly.

    sharcs

    (@sharcs)

    10 years, 8 months ago

    Hey Octoberfields, I may be too late but I wonder if we can help each other.

    My Wordfence IP block feature has been working like a charm until I installed BestWebSoft Captcha this morning. Now my failed login attempts are not being blocked any more.

    Maybe you can turn your captcha off and check if it’s the one causing the problem like mine.

    WFSupport

    (@wfsupport)

    10 years, 8 months ago

    We saw this sometimes happening with another captcha plugin too. They would hijack the login functionality completely.

    Thanks @sharcs for weighing in.

    tim

    sharcs

    (@sharcs)

    10 years, 8 months ago

    Thanks WFSupport, I disabled BestWebSoft Captcha earlier and the IPs started being blocked again.

    Is there a Captcha plugin that has been confirmed to work well with Wordfence?

    WFSupport

    (@wfsupport)

    10 years, 8 months ago

    Not that I am aware of. I know jetpack’s has a problem. Google captcha might but really whenever you are using two plugins touching the same function you are going to have issues.

    tim

    Thread Starter octoberfields

    (@octoberfields)

    10 years, 8 months ago

    Thank you folks! It WAS the captcha that was causing WF not to automatically block IP’s. I was using Google Captcha – disabled it, and now WF is working great.

    Thank you so much.

    sharcs

    (@sharcs)

    10 years, 8 months ago

    No probs. That’s what having a community is all about.

Viewing 8 replies - 1 through 8 (of 8 total)

The topic ‘Wordfence not automatically locking out invalid users’ is closed to new replies.