Title: Blocking a wrong user name
Last modified: January 17, 2017

---

# Blocking a wrong user name

 *  Resolved [fermanus](https://wordpress.org/support/users/fermanus/)
 * (@fermanus)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/blocking-a-wrong-user-name/)
 * Hi,
 * Someone got my (former) admin ID and keeps using it to try to login from a multitude
   of ip addresses. I changed the name and prevented it to be shown by turning on
   the “prevent enumeration feature”. The ennoying thing is that the list of failed
   logins keeps increasing and I am getting tired of cleaning it. I tried to use
   the blacklisting feature to exclude this username but it does not seem to work.
   Is there a special syntax to use such as brackets around the agent to blacklist
   or something or is the feature limited to classical names (ADMIN, TEST…). Thanks
   for letting me know.
    Regards

Viewing 9 replies - 1 through 9 (of 9 total)

 *  Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/)
 * (@mbrsolution)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/blocking-a-wrong-user-name/#post-8666145)
 * Hi, are you by any chance using the rename login page feature under Brute Force
   tab?
 *  Thread Starter [fermanus](https://wordpress.org/support/users/fermanus/)
 * (@fermanus)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/blocking-a-wrong-user-name/#post-8666325)
 * Hi,
 * Thanks for your prompt answer. No, I am using the blacklist manager. There are
   two options: either block ip addresses which I cannot do because they are all
   different or block ID which I use because all login attempts use the same name
   regardless of where they come from.
 *  Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/)
 * (@mbrsolution)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/blocking-a-wrong-user-name/#post-8666506)
 * Hi, can you enable what I mentioned above? See if this works better for you.
 *  Thread Starter [fermanus](https://wordpress.org/support/users/fermanus/)
 * (@fermanus)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/blocking-a-wrong-user-name/#post-8670622)
 * Hi,
    I did as instructed and so far no failed login was registered so it seems
   to work. I am going to miss all these visits from all over the world. More seriously
   the plugin states: _“NOTE: If you are hosting your site on WPEngine or a provider
   which performs server caching, you will need to ask the host support people to
   NOT cache your renamed login page.”_. Why is it so? Anyway I called my host and
   he said that of course they have a server cache but they could not remove the
   renamed login page because I have a shared-hosting plan. Is my page being cached
   a potential problem ? Just for my understanding is there any particular reason
   why the “blacklist manager” did not work?
 * Thanks for your help and good advices.
    Best regards
 *  Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/)
 * (@mbrsolution)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/blocking-a-wrong-user-name/#post-8671112)
 * Hi, the Blacklist Manager does work but there are too many IP addresses range
   that someone can use to try and force their way into your login page. That is
   why this plugin also has a premium addon to totally [block countries](http://www.site-scanners.com/country-blocking-addon/).
   There are many hackers from certain countries that seem to ruin the fun for others.
   So blocking that country can sometimes fix that issue. Besides some products 
   are only sold locally so they don’t really need to be sold to people in other
   countries. If you receive intruders from other countries where you don’t do business
   with then blocking that country makes total sense to me 🙂
 * Now back to the other question. Caching the login page with a secret word and
   if captcha is also enabled may cause problems when you try to login. So excluding
   the login page from caching is a very safe practice and one that will eliminate
   future head aches 🙂
 * Let me know if you need more information or help.
 * Kind regards
    -  This reply was modified 9 years, 3 months ago by [mbrsolution](https://wordpress.org/support/users/mbrsolution/).
 *  Thread Starter [fermanus](https://wordpress.org/support/users/fermanus/)
 * (@fermanus)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/blocking-a-wrong-user-name/#post-8671277)
 * Hi,
 * So that everything is perfectly clear to me, one last question concerning the
   blacklist manager. As I said erlier, in my case I could not use the “enter IP
   addresses” option because there were so many and I tried to use the “enter user
   agents” instead. As all failed logins were due to a single “user name” , I thought
   that simply entering this name in the “enter one or more user agents strings”
   window was OK. But this did not work at all and I kept recording failed logins.
   Apparently I misunderstood something? But what?
    Thanks a lot for your time and
   explanations. Best regards
 *  Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/)
 * (@mbrsolution)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/blocking-a-wrong-user-name/#post-8671687)
 * Hi, I don’t think you did anything wrong. However as per my last comment above
   there are other means for someone to try and log in. Even though you blocked 
   the name which will help a lot and should block that username totally as long
   as the username is not already added to your Users.
 * So in answer to your question.
 * > Apparently I misunderstood something? But what?
 * As far as I know you did not misunderstood anything. However when it comes to
   security there is a lot to learn and many options to enable in a website to protect
   the site from hackers, spammers etc. This is when this great plugin will help
   you in most of the cases by simply enabling the features available in the plugin.
   Of course you need to read the information carefully regarding the feature you
   choose to enable and then you should also test that feature as well.
 * Let me know if you need more help or information.
 * Regards
 *  Thread Starter [fermanus](https://wordpress.org/support/users/fermanus/)
 * (@fermanus)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/blocking-a-wrong-user-name/#post-8672485)
 * Hi,
 * No further help needed for this topic. Everything is clear. Thanks a lot for 
   your time and bye for now.
 * Best regards
 *  Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/)
 * (@mbrsolution)
 * [9 years, 3 months ago](https://wordpress.org/support/topic/blocking-a-wrong-user-name/#post-8672609)
 * You are most welcome 🙂
 * I will mark this support thread as resolved.
 * Enjoy the plugin

Viewing 9 replies - 1 through 9 (of 9 total)

The topic ‘Blocking a wrong user name’ is closed to new replies.

 * ![](https://ps.w.org/all-in-one-wp-security-and-firewall/assets/icon-256x256.
   png?rev=2798307)
 * [All-In-One Security (AIOS) – Security and Firewall](https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/)
 * [Active Topics](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/reviews/)

 * 9 replies
 * 2 participants
 * Last reply from: [mbrsolution](https://wordpress.org/support/users/mbrsolution/)
 * Last activity: [9 years, 3 months ago](https://wordpress.org/support/topic/blocking-a-wrong-user-name/#post-8672609)
 * Status: resolved