dcart87

This appears to cross check ok thank you

I’ve reset the plugin and removed all the rules, then re-enabled. The issues seem to have gone.

The only concern now is the IP address connection settings – the yare set to default but it’s asking me to confirm. Don’t know which one to choose – contacted hosting they don’t know either

1: cookie-based brute force was not switched on.

2: this was not checked.

I’ve disabled and deleted the plugin since I can only navigate to a few pages then it kicks me out.

Edit: I think this is a conflict with the SG Security Plugin.

• This reply was modified 1 year, 8 months ago by dcart87.

Ok thanks for the feedback

It’s the Anti-Malware from GOTMLS.NET security plugin, it’s caught threats (legit ones) before that Wordfence/securi and the others have missed.

He said this plugin ‘has had several breaches and leaks over the last few weeks’.

I did notice traffic with the Complianz tag on my analytics pertaining to the cookie consent option, which I haven’t seen before, so something could be wrong?

Sorry yes, Ive removed it. My security guy has said it’s a compromise, I’m having him clean the site now.

It just forces me to log out instantly. I can’t reactivate the plugin because when I do it logs me out again – I can’t make a fresh install.

I’m having the same issue – I’ve deleted the tables but its still crashing the site.

• This reply was modified 3 years, 3 months ago by dcart87.

Here’s what they said:

‘I believe this is because WP Security is seeing all of Ezoic’s IPs instead of your one origin server IP and thinking this is more user than one’

I tried all of the different settings – my real IP didn’t show and multiple users are being populated.

Thanks.

Thanks for the reply.

Ezoic serves ads on my site – they require you to redirect to their servers.

I believe that Ezoic uses a CDN – which I think may be causing the issue because when I enable IP lockdown via siteground, it won’t recognize my IP and it kicks me out of the admin panel, yet when I log back in the number of users logged in is still very high (they should all have been kicked out when I locked down the IP).

The brute force features activated are:

Rename log in page.
Login form captcha.
Lost password captcha.
Custom login form captcha.
Honeypot.

I also notice that the ‘current IP address’ shown on the login white list (not activated) doesn’t match up to my actual IP address.

Hope some of that helps.

Hi, thanks for the reply.

Today I noticed no issues when working on the same post (+2000 words) with AIOSEO activated – so it might not be the plugin after all.

Ah ok many thanks ??

Thanks for the reply.

Yes just noticed now that trying to fill out the meta description cases the page to freeze completely and won’t reload at all.

Thanks.