Since installing the plugin, I received about 10 emails a day with notifications about site lockouts (either because they tried to many times or because they used user names that I defined as should be locked out).
I then manually add all these IP addresses to the “mywordpress2323##”.
Is there any way that all the blocked IP addresses could be automatically added to the Blacklist manager?
p.s.: how many fake login attempts are considered ‘normal’ per day? I seem to be getting about 30 a day (my website is a simple business profile website).
I’m not a programmer, so if there is a way and you could explain it simply, that would be wonderful.
Thank you and have a great day!
]]>This is the .httpaccess rule:
<IfModule !mod_authz_core.c>
Order allow,deny
Allow from all
Deny from 6x.xxx.xxx.xxx
Deny from xxx.xx.xxx5.xx
</IfModule>
It is not working as expected. I am using lscache in the server if this relevant.
]]>There is some issue with the plugin since when I go to the Blacklit Manager and I add an IP to the list to blacklisted and then click on the “save settings” button I get redirected to 403 Forbidden Page and IP does not get saved.
Can you please let me know how to fix this problem?
Thanks!
]]><blockquote>Enter one or more IP addresses or IP ranges. -More Info
Each IP address must be on a new line.
To specify an IP range use a wildcard "*" character. Acceptable ways to use wildcards is shown in the examples below:
Example 1: 195.47.89.*
Example 2: 195.47.*.*
Example 3: 195.*.*.*
But when you enter wildcard addresses to blacklist such as these;
181.16.*.*
187.21.*.*
200.84.*.*
206.62.*.*
37.188.*.*
105.106.*.*
5.104.19.*.*`
I get an error message at the top in red reading;
5.104.19.*.* is not a valid ip address format.
The Blacklist Manager will not allow engagement and unchecks the box that reads;
Enable IP or User Agent Blacklisting: Check this if you want to enable the banning (or blacklisting) of selected IP addresses and/or user agents specified in the settings below
*This plugin is regularly updated and everything else in it works well. This seems to be a direct function coding issue that doesn’t allow wildcards even though the instructions show that you can. I would have upload a screen capture if the function was available.
]]>A lockdown event has occurred due to too many failed login attempts or invalid username: Username: ekzamenov IP Address: 185.119.81.104 IP Range: 185.119.81.*
I've added that IP Range to my htaccess file using the Blacklist Manager but the lockout messages keep trickling in almost every day.
What I see in the .htaccess file is included below (note, a while back I added another range which is also shown). My webhost is serving up my site using Apache.
Not sure how to block all these login attempts from 185.118.81.*
Any help is appreciated.
Many thanks,
Sue
# Apache < 2.3
<IfModule !mod_authz_core.c>
Order Allow,Deny
Allow from all
Deny from env=bad_bot
#AIOWPS_IP_BLACKLIST_2_3_START
Deny from 185.119.81.0/24
Deny from 202.164.60.0/24
#AIOWPS_IP_BLACKLIST_2_3_END
</IfModule>
# Apache >= 2.3
<IfModule mod_authz_core.c>
<RequireAll>
Require all Granted
Require not env bad_bot
#AIOWPS_IP_BLACKLIST_2_4_START
Require not ip 185.119.81.0/24
Require not ip 202.164.60.0/24
#AIOWPS_IP_BLACKLIST_2_4_END`
I have a certain IP address that keeps trying to login to my website. I’ve put it into blacklist manager, but it still keeps trying to login. Is there another way I can block it?
]]>