• Resolved akiraanastasia


    Hi team, even after adding IP address to whitelist, most of the time I get locked out from my site. How to solve this issue?

    and any Solution for dynamic IP address?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support chandelierrr


    Hi @akiraanastasia, thanks for reaching out. We’re happy to help!

    You can use the wildcard method to whitelist your dynamic IP. For example, if you want to whitelist the range to, you can use 64.233.160.* or 64.233.*.* depending on the IP range you want to cover.

    However, let’s look at this from a different angle. Why are bad login attempts causing frequent lockouts to your account/IP? I’d suggest checking the Raw Details of the lockouts in Security > Logs

    If the lockouts are due to login with wrong credentials and it’s not you who made those attempts, your username might be compromised and the attackers use it to brute force their way to your site. In this case, I’d suggest creating a new admin user with a unique username, transferring all content, and deleting the old username.

    If the lockouts are due to attacks on the xmlrpc.php file, you can restrict public access to it via Security > Settings > Advanced > WordPress Tweaks.

    There’s also the possibility of your server IP address changing, and the plugin found the activity suspicious and banned it as a precaution. In this case, you can check with your host if there’s a recent change with the server IP and if that IP is added to the plugin’s ban list. It would also help to double-check the itsec_bans database table to ensure the server IP isn’t there. Then, add the server IP to the Authorized Hosts list.

    If we can identify why you’re getting locked out, that would help us troubleshoot this problem.

    Hope this helps, and let us know what you find!

    Thread Starter akiraanastasia


    @shanedelierrr my dynamic ip is big, so can i add like this: 4505:281:*:*:*:*:* Its like 6 stars *

    Plugin Support Ben Meredith


    Hey @akiraanastasia!

    You can certainly try to isolate/figure out hoe to whitelist the entire range of dynamic IPs, but @shanedelierrr’ s advice remains the fastest way to resolve the underlying problem. You shouldn’t be getting locked out of your site, and if you are it stands to reason that isolating *why* your user is getting locked out, and fixing it from that side is going to be more effective than trying to massage the whitelist to accommodate your dynamic IP.

    Have a great day!

Viewing 3 replies - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.