All in one WP Security Firewall problem

  • Resolved pingsunday

    (@pingsunday)


    6 years, 7 months ago

    Dear Jeff Starr,

    I’m the admin of my blog. I think that my blog works perfectly, but recently I just discover the huge problem. Here is the story:

    – Recently, I install “All In One WP Security & Firewall” plugin to protect my site. But by watching “Google Analytics Dashboard” there is a huge drop of traffic: (after I disable the plugin, the traffic goes up again)

    View post on imgur.com

    – And I begin to investigate the problem. Is my site hacked? I looked for the “.lastlogin” in my root, and found it:

    115.110.137.26 # 2018-03-20 02:35:10 -0600
    115.110.137.26 # 2018-04-10 06:12:36 -0600

    There is someone stranger who has access to my blog. Immediately, I changed my password. But I’m not sure that they injected something or not.

    – And then I learn how to monitor the Log file. And I find your blog: https://digwp.com/2009/07/monitor-php-errors-wordpress/

    – And then I find Banhammer. That is the true story!

    —————

    Here is my question?

    – In your opinion, why the traffic drop? That means the plugin blocked “good traffic” or “bad traffic”?

    – How to ensure that my blog is clean?

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Author Jeff Starr

    (@specialk)

    Glad to help:

    1) “In your opinion, why the traffic drop? That means the plugin blocked “good traffic” or “bad traffic”?”

    I don’t know, but would suspect it has something to do with your idea, “after I disable the plugin, the traffic goes up again”. I would begin there and investigate for more clues (check error log, et al).

    2) “That means the plugin blocked “good traffic” or “bad traffic”?”

    I never use “All In One WP Security & Firewall”, so can’t really say what it might be doing. My best advice would be to contact the developers of that plugin and ask them, should be glad to help.

    3) “How to ensure that my blog is clean?”

    There are free services that you can use to scan your site, although they can’t guarantee anything. There also are free plugins and tools, and you may even be able to find some free help from around the Web (use trusted sources only). But the best advice if you want to just “get it done” is to hire a professional to clean it up for you. That way someone will be accountable for any work that is done to your site.

    Let me know if I can provide any further infos, glad to help however possible.

Viewing 1 replies (of 1 total)
  • The topic ‘All in one WP Security Firewall problem’ is closed to new replies.