• Resolved mubiesam

    (@mubiesam)


    Had set Google reCAPTCHA for Login Captcha, and Blacklisted this ip 5.188.62.5 from Russia, but still found “Wrong Password” actions in Activity Log which is from above mentioned ip.

    Is there anything wrong in my setting?
    Thanks

    
    # Apache < 2.3
    <IfModule !mod_authz_core.c>
    Order Allow,Deny
    Allow from all
    Deny from env=bad_bot
    #AIOWPS_IP_BLACKLIST_2_3_START
    Deny from 130.211.215.66
    Deny from 146.148.75.25
    Deny from 35.188.173.37
    Deny from 35.202.197.29
    Deny from 35.202.238.221
    Deny from 35.226.223.149
    Deny from 35.232.237.90
    Deny from 35.239.114.60
    Deny from 5.188.62.5
    #AIOWPS_IP_BLACKLIST_2_3_END
    
    </IfModule>
Viewing 10 replies - 1 through 10 (of 10 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    To confirm if the blacklist feature works in your site try using your IP address to block yourself temporarily.

    Note: If the blacklist is working properly you will see a “403 Forbidden” error whenever anyone with a blacklisted IP address attempts to access your site.

    1) Make sure you are logged into your server using FTP. This will be handy to unlock yourself if needed.

    2) Log into WordPress admin panel and add your IP address to the blacklist settings.

    3) Try accessing your site from a browser where you are not logged in.
    You should be denied access. If not, then the apache directives are not working on your server.

    (If things are working fine and you do get blocked, just FTP your .htaccess file from your server to your computer and edit that file and remove the part of the code which has your IP address and then FTP the file back to the server)

    Let me know how you go.

    Kind regards

    Thread Starter mubiesam

    (@mubiesam)

    Hi @mbrsolution

    Tried to add my ip address to the blacklist setting, but got
    “You cannot ban your own IP address: xxxxxxx”
    So I added my ip address directly into .htaccess “Deny from”,
    but still can access from a browser where I am not logged in.

    Does it mean apache directives is not working, how should I resolve from this point?

    Thanks
    Sam

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi Sam, it looks like your apache directives are not working properly. You need to speak to your host about this issue.

    Let me know what they say.

    Kind regards

    Thread Starter mubiesam

    (@mubiesam)

    Hi @mbrsolution

    Contacting Bitnami, will get back to you with update.

    Thanks

    Thread Starter mubiesam

    (@mubiesam)

    Hi @mbrsolution

    Below is the reply from Bitnami, is there a way for your plugin to write to htaccess.conf file optionally?
    ============
    By default, we disable .htaccess files, move the configuration in those files to the main application configuration files and set the AllowOverride option to None. Note the Apache Software Foundation also recommends this configuration.

    You will need to include the required configuration to the /opt/bitnami/apps/wordpress/conf/htaccess.conf file instead under the /opt/bitnam/apps/wordpress/htdocs directory. You will need to add the lines below at the end of the htaccess.conf file and replace the placeholder with your actual configuration for the plugin.

    <Directory “/opt/bitnami/apps/wordpress/htdocs”>
    [YOUR_PLUGIN_CONFIG_HERE]
    </Directory>
    Remember to restart Apache service for changes to take effect

    sudo /opt/bitnami/ctlscript.sh restart apache
    Also, you can get more information about our .htaccess file configuration in the link below

    https://docs.bitnami.com/google/infrastructure/lamp/administration/use-htaccess/

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, I have submitted a message to the developers to investigate further your issue.

    Kind regards

    Plugin Contributor wpsolutions

    (@wpsolutions)

    Hi @mubiesam,
    You will need to follow the instructions given by your host provider because only you will have permissions to do the things they suggest (especially the restarting of Apache).

    Thread Starter mubiesam

    (@mubiesam)

    Hi @wpsolutions

    I know and will follow the instruction, just asking whether you will consider to add the option for this kind of configuration in the different location.

    Thanks

    Plugin Contributor wpsolutions

    (@wpsolutions)

    Hi @mubiesam
    I will need to look into the bitnami setup to see if it will be at all possible and viable to do what you arw asking from a plugin.
    If so then possibly something can be introduced in this plugin to address this.

    Thread Starter mubiesam

    (@mubiesam)

    Thanks

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘“Wrong Password” action in Activity Log’ is closed to new replies.