Wordfence is a fantastic security plugin, so much so that sometimes it goes away and may block you yourself or all access to your own website because of very restrictive configurations.
Something that many of you will have verified that happened here a few hours ago, so let's take the opportunity to explain why this happens and, everything, how to solve it if necessary.
Wordfence, among its multiple configurations, has a complete Firewall system with which to limit IPs, block false search engine robots and contain attacks from suspicious servers
The bad thing is when you have a web with many accesses from the same IP, because Wordfence can identify you, by mistake, as an attack and block your server's own IP which is what happened in WordPress Help a few hours ago oras
Messages like these when you access your website give you the clue, and the solution:
The problem is often because if you have a high traffic website sometimes there are many requests that are made from the same server IP (plugins, scripts, css, etc) and Wordfence blocks the IP, in this case yours
The first obvious solution would be to rename the folder of the Wordfence plugin from FTP to deactivate it but it does not always work. And it does not always work because blocking can also reach the FTP connection . If this is the case, you should use the FTP web utility of your hosting provider and, now, rename the plugin folder, normally ' wordfence ' to deactivate the plugin.
But think that only by re-renaming and activating it the problem is over no. Wordfence will continue to store IP blocking in its database tables, so before we have to perform a previous step .
There is a plugin called Wordfence assistant that is used to These sad matters. So once you have disabled the Wordfence plugin via FTP or Web FTP install and activate the plugin Wordfence assistant and go through its settings page.
Once there you have to press the button called " ] Disable Wordfence Firewall . " Even if Wordfence is inactive, this button cancels the Firewall settings so that when you activate it, it is inactive by default.
Once you have clicked the button you can now rename the Wordfence plugin to its original name (do it, which for updates is the best) and activate it. Now you should have no problems accessing your WordPress on most occasions.
But that is not always the case. If for any reason you still can not access it, it is still active blocking your IP even if you have disabled the Firewall Wordfence.
If so, deactivate Wordfence again renaming the folder by FTP and move again by the settings page of Wordfence Assistant and press the button labeled " Clear all WordFence locked out IPs, locked out users and advanced blocks ". This deletes the table of IPs blocked by Wordfence .
Once again, the last one, renames and activates Wordfence. Everything will work and you can access normally. If you want to disable or even delete the plugin Wordfence assistant it is no longer necessary.
You can re-activate the Wordfence Firewall but avoid activating the box causing the problem and reflected in the notice you received when trying to access your website, which may vary depending on your configuration. In my case it was to block bots from fake searchers, but it may be another one in your case.