mikejj101

Hi,
I’ve followed the setup of the blocking xmlrpc and it now does bring up the ‘Forbidden’ notice so maybe we can get rid of some of the hacking attacks. Have noticed a drop in the number of failed login attempts from ‘admin’ and ‘author’ and no-one is trying to login with my username now.
Thanks for all your advice.

Hi,
Don’t really understand the Rename Login Page feature so haven’t enabled that one.
I’ve enabled the Cookie based Brute Force Prevention but that doesn’t seem to block all the hacking attempts.
I’ll read up on the rename login page stuff.

Thanks.

Yes, thank you for that.
I’m getting fed up with all the failed login attempts from various I.P. addresses that are using my username ? How did they get my username if their I.P. address is blocked ?
I’ve adjusted the auto lockout to 5 attempts but still keep getting loads of the failed attempts over 24hrs.
I’ve tried changing my username but minutes after I change it someone tries to log in with my new username ? How do they monitor my ‘new’ username ?
Obviously some of these attempted hacking attacks are coming from VPN supported sources.
Is there a Plugin that can detect if the user is using a VPN?
Found this one – Proxy & VPN Blocker and by testing it does seem to work.
I’ll see if this stops all the rough log in attempts.

• This reply was modified 3 years, 11 months ago by mikejj101.
• This reply was modified 3 years, 11 months ago by mikejj101.

Sorry, this question should be on the AIOWPS Forum support page – I don’t know how to move it.

Excellent job Chad. Fixed my problems and now no mo0ans from our subscribers.
Genius programmer.
Thanks.

Thanks for getting back to me on this issue.
It’s been a bit of a problem to say the least.

Looking forward to the reworked plugin.

Thank you for the response Steven.
Surely it can’t be just me that has this problem.
Hopefully I can get an answer.
regards

Hi Bilog312,
How did you resolve the ‘Password Key Expired’ problem ?
Any help you can give would be appreciated.

Regards
Mike Jones

I have exactly the same issue with our website.
Been through all the settings of WP-Members and can’t find out how to solve this issue.
Someone please help.

Forget this message – it’s now sorted

OK. Problem solved.
We use Pickaweb hosting and they use Cpanel.
There is a feature within Cpanel called ‘Mod Security’.
Apparently this feature decided in it’s infinite wisdom to ‘Blacklist’ and block my IP because of ‘frequent access’? What do they expect when maintaining a website?
By disabling this module I can now backup the file.
I have queried this feature with the hosting company and asked why there is not a whitelist for IP addresses in the module.

Just a thought – I read that some hosting companies block access to this file ? Is this true? Could that be the problem?

Hi,
Thanks for the response.
I assume you mean the permissions as set via FTP ?
It’s set that owner has read/write

Is there any other way to set permissions?

Forgot to mention – this is whilst using the AIOWP plugin and the settings screen in that plugin.
Mike

Success with getting site back running. Got AIOWPS running again as well.
Hosting company had to go back two backups to clear the errors but did prove really helpful.
Thanks for all your help in trying to resolve my issues. 5 star support *****