iThemes Security log lists lockouts from internal net

  • Resolved bobmorris60

    (@bobmorris60)


    6 years, 3 months ago

    A clients using free iThemes Security just started getting lockouts on the internal net 192.168.x.x.

    I’ve never seen this before. Any ideas what could be causing it?

    (See link to screenshot on Facebook)

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)

  • By default the iTSec plugin makes it very easy for clients to spoof their IP.

    This way it’s easy for an attacker to make you think the IP is from the internal network …

    It’s one of the big weaknesses of this plugin.

    Click on the Configure Settings button of the Global Settings module and then scroll all the way down.
    Enable the Override Proxy Detection setting and save settings (Don’t do this if the site actually is behind a proxy!).

    From now on you’ll probably start seeing the real IPs in the Logs page.

    Thread Starter bobmorris60

    (@bobmorris60)

    Just turned Override on. Thanks!

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘iThemes Security log lists lockouts from internal net’ is closed to new replies.