robertorg2025

Yes I know but I do not know what plugin can I use to our website.

Do you help me please ??

Thanks for all… I resolved the problem.

I have access to all web files by ftp, including mysql database but I can’t access to apache config and others configs.

The wordpress is a normal wordpress.

I try with this:

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress

just this at .htaccess

Not work ??

This is the .htaccess at directory…

# BEGIN iThemes Security – No modifiques ni borres esta l?-nea
# iThemes Security Config Details: 2
# Activar la caracter?-stica de lista negra de HackRepair.com – Seguridad > Ajustes > Usuarios baneados > Lista negra por defecto
# Start HackRepair.com Blacklist
RewriteEngine on
# Start Abuse Agent Blocking
RewriteCond %{HTTP_USER_AGENT} “^Mozilla.*Indy” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Mozilla.*NEWT” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^$” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Maxthon$” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^SeaMonkey$” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Acunetix” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^binlar” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^BlackWidow” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Bolt 0” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^BOT for JCE” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Bot mailto\:craftbot@yahoo\.com” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^casper” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^checkprivacy” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^ChinaClaw” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^clshttp” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^cmsworldmap” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Custo” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Default Browser 0” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^diavol” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^DIIbot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^DISCo” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^dotbot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Download Demon” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^eCatch” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^EirGrabber” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^EmailCollector” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^EmailSiphon” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^EmailWolf” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Express WebPictures” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^extract” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^ExtractorPro” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^EyeNetIE” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^feedfinder” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^FHscan” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^FlashGet” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^flicky” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^g00g1e” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^GetRight” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^GetWeb\!” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Go\!Zilla” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Go\-Ahead\-Got\-It” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^grab” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^GrabNet” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Grafula” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^harvest” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^HMView” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Image Stripper” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Image Sucker” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^InterGET” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Internet Ninja” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^InternetSeer\.com” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^jakarta” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Java” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^JetCar” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^JOC Web Spider” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^kanagawa” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^kmccrew” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^larbin” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^LeechFTP” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^libwww” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Mass Downloader” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^microsoft\.url” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^MIDown tool” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^miner” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Mister PiX” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^MSFrontPage” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Navroad” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^NearSite” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Net Vampire” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^NetAnts” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^NetSpider” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^NetZIP” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^nutch” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Octopus” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Offline Explorer” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Offline Navigator” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^PageGrabber” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Papa Foto” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^pavuk” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^pcBrowser” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^PeoplePal” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^planetwork” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^psbot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^purebot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^pycurl” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^RealDownload” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^ReGet” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Rippers 0” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^sitecheck\.internetseer\.com” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^SiteSnagger” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^skygrid” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^SmartDownload” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^sucker” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^SuperBot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^SuperHTTP” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Surfbot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^tAkeOut” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Teleport Pro” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Toata dragostea mea pentru diavola” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^turnit” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^vikspider” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^VoidEYE” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Web Image Collector” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WebAuto” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WebBandit” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WebCopier” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WebFetch” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WebGo IS” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WebLeacher” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WebReaper” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WebSauger” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Website eXtractor” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Website Quester” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WebStripper” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WebWhacker” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WebZIP” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Widow” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WPScan” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WWW\-Mechanize” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^WWWOFFLE” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Xaldon WebSpider” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^Zeus” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “^zmeu” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “360Spider” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “CazoodleBot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “discobot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “EasouSpider” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “ecxi” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “GT\:\:WWW” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “heritrix” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “HTTP\:\:Lite” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “HTTrack” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “ia_archiver” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “id\-search” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “IDBot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “Indy Library” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “IRLbot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “ISC Systems iRc Search 2\.1” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “LinksCrawler” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “LinksManager\.com_bot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “linkwalker” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “lwp\-trivial” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “MFC_Tear_Sample” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “Microsoft URL Control” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “Missigua Locator” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “MJ12bot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “panscient\.com” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “PECL\:\:HTTP” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “PHPCrawl” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “PleaseCrawl” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “SBIder” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “SearchmetricsBot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “Snoopy” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “Steeler” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “URI\:\:Fetch” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “urllib” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “Web Sucker” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “webalta” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “WebCollage” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “Wells Search II” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “WEP Search” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “XoviBot” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “YisouSpider” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “zermelo” [NC,OR]
RewriteCond %{HTTP_USER_AGENT} “ZyBorg” [NC,OR]
# End Abuse Agent Blocking
# Start Abuse HTTP Referrer Blocking
RewriteCond %{HTTP_REFERER} “^https?://(?:[^/]+\.)?semalt\.com” [NC,OR]
RewriteCond %{HTTP_REFERER} “^https?://(?:[^/]+\.)?kambasoft\.com” [NC,OR]
RewriteCond %{HTTP_REFERER} “^https?://(?:[^/]+\.)?savetubevideo\.com” [NC]
# End Abuse HTTP Referrer Blocking
RewriteRule ^.* – [F,L]
# End HackRepair.com Blacklist, https://pastebin.com/u/hackrepair

# Banear servidores – Seguridad > Ajustes > Usuarios baneados
SetEnvIF REMOTE_ADDR “^200\.5\.121\.220$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^200\.5\.121\.220$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^200\.5\.121\.220$” DenyAccess

SetEnvIF REMOTE_ADDR “^123\.30\.51\.186$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^123\.30\.51\.186$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^123\.30\.51\.186$” DenyAccess

SetEnvIF REMOTE_ADDR “^88\.255\.171\.55$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^88\.255\.171\.55$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^88\.255\.171\.55$” DenyAccess

SetEnvIF REMOTE_ADDR “^51\.254\.143\.113$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^51\.254\.143\.113$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^51\.254\.143\.113$” DenyAccess

SetEnvIF REMOTE_ADDR “^121\.78\.145\.53$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^121\.78\.145\.53$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^121\.78\.145\.53$” DenyAccess

SetEnvIF REMOTE_ADDR “^185\.92\.73\.172$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^185\.92\.73\.172$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^185\.92\.73\.172$” DenyAccess

SetEnvIF REMOTE_ADDR “^185\.92\.73\.107$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^185\.92\.73\.107$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^185\.92\.73\.107$” DenyAccess

SetEnvIF REMOTE_ADDR “^216\.244\.66\.244$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^216\.244\.66\.244$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^216\.244\.66\.244$” DenyAccess

SetEnvIF REMOTE_ADDR “^54\.37\.85\.105$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^54\.37\.85\.105$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^54\.37\.85\.105$” DenyAccess

SetEnvIF REMOTE_ADDR “^185\.63\.254\.37$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^185\.63\.254\.37$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^185\.63\.254\.37$” DenyAccess

SetEnvIF REMOTE_ADDR “^200\.32\.12\.130$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^200\.32\.12\.130$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^200\.32\.12\.130$” DenyAccess

SetEnvIF REMOTE_ADDR “^18\.234\.200\.5$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^18\.234\.200\.5$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^18\.234\.200\.5$” DenyAccess

SetEnvIF REMOTE_ADDR “^207\.241\.232\.217$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^207\.241\.232\.217$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^207\.241\.232\.217$” DenyAccess

SetEnvIF REMOTE_ADDR “^207\.241\.232\.98$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^207\.241\.232\.98$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^207\.241\.232\.98$” DenyAccess

SetEnvIF REMOTE_ADDR “^207\.241\.231\.211$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^207\.241\.231\.211$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^207\.241\.231\.211$” DenyAccess

SetEnvIF REMOTE_ADDR “^66\.249\.64\.44$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^66\.249\.64\.44$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^66\.249\.64\.44$” DenyAccess

SetEnvIF REMOTE_ADDR “^207\.241\.232\.220$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^207\.241\.232\.220$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^207\.241\.232\.220$” DenyAccess

SetEnvIF REMOTE_ADDR “^46\.4\.104\.4$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^46\.4\.104\.4$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^46\.4\.104\.4$” DenyAccess

SetEnvIF REMOTE_ADDR “^207\.241\.232\.219$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^207\.241\.232\.219$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^207\.241\.232\.219$” DenyAccess

SetEnvIF REMOTE_ADDR “^207\.241\.232\.96$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^207\.241\.232\.96$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^207\.241\.232\.96$” DenyAccess

SetEnvIF REMOTE_ADDR “^207\.241\.231\.213$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^207\.241\.231\.213$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^207\.241\.231\.213$” DenyAccess

SetEnvIF REMOTE_ADDR “^207\.241\.229\.108$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^207\.241\.229\.108$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^207\.241\.229\.108$” DenyAccess

SetEnvIF REMOTE_ADDR “^207\.241\.231\.194$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^207\.241\.231\.194$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^207\.241\.231\.194$” DenyAccess

SetEnvIF REMOTE_ADDR “^207\.241\.233\.211$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^207\.241\.233\.211$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^207\.241\.233\.211$” DenyAccess

SetEnvIF REMOTE_ADDR “^207\.241\.232\.172$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^207\.241\.232\.172$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^207\.241\.232\.172$” DenyAccess

SetEnvIF REMOTE_ADDR “^207\.241\.232\.176$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^207\.241\.232\.176$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^207\.241\.232\.176$” DenyAccess

SetEnvIF REMOTE_ADDR “^207\.241\.231\.103$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^207\.241\.231\.103$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^207\.241\.231\.103$” DenyAccess

SetEnvIF REMOTE_ADDR “^34\.202\.93\.213$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^34\.202\.93\.213$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^34\.202\.93\.213$” DenyAccess

<IfModule mod_authz_core.c>
<RequireAll>
Require all granted
Require not env DenyAccess
Require not ip 200.5.121.220
Require not ip 123.30.51.186
Require not ip 88.255.171.55
Require not ip 51.254.143.113
Require not ip 121.78.145.53
Require not ip 185.92.73.172
Require not ip 185.92.73.107
Require not ip 216.244.66.244
Require not ip 54.37.85.105
Require not ip 185.63.254.37
Require not ip 200.32.12.130
Require not ip 18.234.200.5
Require not ip 207.241.232.217
Require not ip 207.241.232.98
Require not ip 207.241.231.211
Require not ip 66.249.64.44
Require not ip 207.241.232.220
Require not ip 46.4.104.4
Require not ip 207.241.232.219
Require not ip 207.241.232.96
Require not ip 207.241.231.213
Require not ip 207.241.229.108
Require not ip 207.241.231.194
Require not ip 207.241.233.211
Require not ip 207.241.232.172
Require not ip 207.241.232.176
Require not ip 207.241.231.103
Require not ip 34.202.93.213
</RequireAll>
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Allow from all
Deny from env=DenyAccess
Deny from 200.5.121.220
Deny from 123.30.51.186
Deny from 88.255.171.55
Deny from 51.254.143.113
Deny from 121.78.145.53
Deny from 185.92.73.172
Deny from 185.92.73.107
Deny from 216.244.66.244
Deny from 54.37.85.105
Deny from 185.63.254.37
Deny from 200.32.12.130
Deny from 18.234.200.5
Deny from 207.241.232.217
Deny from 207.241.232.98
Deny from 207.241.231.211
Deny from 66.249.64.44
Deny from 207.241.232.220
Deny from 46.4.104.4
Deny from 207.241.232.219
Deny from 207.241.232.96
Deny from 207.241.231.213
Deny from 207.241.229.108
Deny from 207.241.231.194
Deny from 207.241.233.211
Deny from 207.241.232.172
Deny from 207.241.232.176
Deny from 207.241.231.103
Deny from 34.202.93.213
</IfModule>

# Desactivar XML-RPC – Seguridad > Ajustes > Ajustes WordPress > XML-RPC
<files xmlrpc.php>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
</IfModule>
</files>

<IfModule mod_rewrite.c>
RewriteEngine On

# Reduce el spam en los comentarios – Seguridad > Ajustes > Mejoras de WordPress > Spam de comentarios
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{REQUEST_URI} /wp-comments-post\.php$
RewriteCond %{HTTP_USER_AGENT} ^$ [OR]
RewriteCond %{HTTP_REFERER} !^https?://(([^/]+\.)?radiocaibarien\.icrt\.cu|jetpack\.wordpress\.com/jetpack-comment)(/|$) [NC]
RewriteRule ^.* – [F]
</IfModule>

# Proteger los archivos de sistema – Seguridad > Ajustes > Sistema de ajustes > Archivos de sistema
<files .htaccess>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
</IfModule>
</files>
<files readme.html>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
</IfModule>
</files>
<files readme.txt>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
</IfModule>
</files>
<files wp-config.php>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
</IfModule>
</files>

# Desactivar navegaci?3n por directorio – Seguridad > Ajustes > Sistema de ajustes > Navegaci?3n por directorio
Options -Indexes

<IfModule mod_rewrite.c>
RewriteEngine On

# Proteger los archivos de sistema – Seguridad > Ajustes > Sistema de ajustes > Archivos de sistema
RewriteRule ^wp-admin/install\.php$ – [F]
RewriteRule ^wp-admin/includes/ – [F]
RewriteRule !^wp-includes/ – [S=3]
RewriteRule ^wp-includes/[^/]+\.php$ – [F]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php – [F]
RewriteRule ^wp-includes/theme-compat/ – [F]
RewriteCond %{REQUEST_FILENAME} -f
RewriteRule (^|.*/)\.(git|svn)/.* – [F]

# Deshabilitar PHP en Uploads – Seguridad > Ajustes > Ajustes del sistema > PHP en Uploads
RewriteRule ^wp\-content/uploads/.*\.(?:php[1-7]?|pht|phtml?|phps)\.?$ – [NC,F]

# Filtra los m??todos de petici?3n – Seguridad > Ajustes > Mejoras del sistema > M??todos de petici?3n
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) [NC]
RewriteRule ^.* – [F]

# Filtrar cadenas de consulta sospechosas en la URL – Seguridad > Ajustes > Ajustes del sistema > Cadenas de consulta sospechosas
RewriteCond %{QUERY_STRING} \.\.\/ [OR]
RewriteCond %{QUERY_STRING} \.(bash|git|hg|log|svn|swp|cvs) [NC,OR]
RewriteCond %{QUERY_STRING} etc/passwd [NC,OR]
RewriteCond %{QUERY_STRING} boot\.ini [NC,OR]
RewriteCond %{QUERY_STRING} ftp: [NC,OR]
RewriteCond %{QUERY_STRING} https?: [NC,OR]
RewriteCond %{QUERY_STRING} (<|%3C)script(>|%3E) [NC,OR]
RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|%3D) [NC,OR]
RewriteCond %{QUERY_STRING} base64_decode\( [NC,OR]
RewriteCond %{QUERY_STRING} %24&x [NC,OR]
RewriteCond %{QUERY_STRING} 127\.0 [NC,OR]
RewriteCond %{QUERY_STRING} (^|\W)(globals|encode|localhost|loopback)($|\W) [NC,OR]
RewriteCond %{QUERY_STRING} (^|\W)(concat|insert|union|declare)($|\W) [NC,OR]
RewriteCond %{QUERY_STRING} %[01][0-9A-F] [NC]
RewriteCond %{QUERY_STRING} !^loggedout=true
RewriteCond %{QUERY_STRING} !^action=jetpack-sso
RewriteCond %{QUERY_STRING} !^action=rp
RewriteCond %{HTTP_COOKIE} !wordpress_logged_in_
RewriteCond %{HTTP_REFERER} !^https://maps\.googleapis\.com
RewriteRule ^.* – [F]

# Filtrar caracteres no ingleses – Seguridad> Ajustes > Ajustes del sistema> Caracteres no ingleses
RewriteCond %{QUERY_STRING} %[A-F][0-9A-F] [NC]
RewriteRule ^.* – [F]
</IfModule>
# END iThemes Security – No modifiques ni borres esta l?-nea

# BEGIN WPSuperCache
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
#If you serve pages from behind a proxy you may want to change ‘RewriteCond %{HTTPS} on’ to something more sensible
AddDefaultCharset UTF-8
RewriteCond %{REQUEST_URI} !^.*[^/]$
RewriteCond %{REQUEST_URI} !^.*//.*$
RewriteCond %{REQUEST_METHOD} !POST
RewriteCond %{QUERY_STRING} ^$
RewriteCond %{HTTP:Cookie} !^.*(comment_author_|wordpress_logged_in|wp-postpass_).*$
RewriteCond %{HTTP:X-Wap-Profile} !^[a-z0-9\”]+ [NC]
RewriteCond %{HTTP:Profile} !^[a-z0-9\”]+ [NC]
RewriteCond %{HTTP:Accept-Encoding} gzip
RewriteCond %{HTTPS} on
RewriteCond %{DOCUMENT_ROOT}/wp-content/cache/supercache/%{SERVER_NAME}/$1/index-https.html.gz -f
RewriteRule ^(.*) “/wp-content/cache/supercache/%{SERVER_NAME}/$1/index-https.html.gz” [L]
RewriteCond %{REQUEST_URI} !^.*[^/]$
RewriteCond %{REQUEST_URI} !^.*//.*$
RewriteCond %{REQUEST_METHOD} !POST
RewriteCond %{QUERY_STRING} ^$
RewriteCond %{HTTP:Cookie} !^.*(comment_author_|wordpress_logged_in|wp-postpass_).*$
RewriteCond %{HTTP:X-Wap-Profile} !^[a-z0-9\”]+ [NC]
RewriteCond %{HTTP:Profile} !^[a-z0-9\”]+ [NC]
RewriteCond %{HTTP:Accept-Encoding} gzip
RewriteCond %{HTTPS} !on
RewriteCond %{DOCUMENT_ROOT}/wp-content/cache/supercache/%{SERVER_NAME}/$1/index.html.gz -f
RewriteRule ^(.*) “/wp-content/cache/supercache/%{SERVER_NAME}/$1/index.html.gz” [L]
RewriteCond %{REQUEST_URI} !^.*[^/]$
RewriteCond %{REQUEST_URI} !^.*//.*$
RewriteCond %{REQUEST_METHOD} !POST
RewriteCond %{QUERY_STRING} ^$
RewriteCond %{HTTP:Cookie} !^.*(comment_author_|wordpress_logged_in|wp-postpass_).*$
RewriteCond %{HTTP:X-Wap-Profile} !^[a-z0-9\”]+ [NC]
RewriteCond %{HTTP:Profile} !^[a-z0-9\”]+ [NC]
RewriteCond %{HTTPS} on
RewriteCond %{DOCUMENT_ROOT}/wp-content/cache/supercache/%{SERVER_NAME}/$1/index-https.html -f
RewriteRule ^(.*) “/wp-content/cache/supercache/%{SERVER_NAME}/$1/index-https.html” [L]
RewriteCond %{REQUEST_URI} !^.*[^/]$
RewriteCond %{REQUEST_URI} !^.*//.*$
RewriteCond %{REQUEST_METHOD} !POST
RewriteCond %{QUERY_STRING} ^$
RewriteCond %{HTTP:Cookie} !^.*(comment_author_|wordpress_logged_in|wp-postpass_).*$
RewriteCond %{HTTP:X-Wap-Profile} !^[a-z0-9\”]+ [NC]
RewriteCond %{HTTP:Profile} !^[a-z0-9\”]+ [NC]
RewriteCond %{HTTPS} !on
RewriteCond %{DOCUMENT_ROOT}/wp-content/cache/supercache/%{SERVER_NAME}/$1/index.html -f
RewriteRule ^(.*) “/wp-content/cache/supercache/%{SERVER_NAME}/$1/index.html” [L]
</IfModule>
# END WPSuperCache
AddHandler fastcgi-script .fcgi
#Proteger WP-CONFIG desde el exterior
<files wp-config.php>
order allow,deny
deny from all
</files>
# Redirigir tr????fico de https://www.radiocaibarien.cu a https://www.radiocaibarien.icrt.cu
RewriteEngine On
RewriteCond %{HTTP_HOST} ^www.radiocaibarien.cu [NC]
RewriteRule ^(.*)$ https://www.radiocaibarien.icrt.cu$1 [L,R=301]
#Fin modificacion
#Limitar acceso por IP
<Files “wp-login.php”>
Order deny,allow
Deny from all
Allow from 10.5.1.1
Allow from 10.5.1.3
Allow from 10.5.1.41
Allow from 10.5.1.42
Allow from 10.5.1.51
Allow from 10.5.1.52
Allow from 10.5.1.53
Allow from 10.5.1.200
</Files>
<FilesMatch “\.(ttf|otf|eot|woff|woff2)$”>
<IfModule mod_headers.c>
Header set Access-Control-Allow-Origin “*”
</IfModule>
</FilesMatch>
#Fin modificacion
<IfModule mod_expires.c>
ExpiresActive On
# Images
ExpiresByType image/jpeg “access plus 1 year”
ExpiresByType image/gif “access plus 1 year”
ExpiresByType image/png “access plus 1 year”
ExpiresByType image/webp “access plus 1 year”
ExpiresByType image/svg+xml “access plus 1 year”
ExpiresByType image/x-icon “access plus 1 year”
# Video
ExpiresByType video/mp4 “access plus 1 year”
ExpiresByType video/mpeg “access plus 1 year”
# CSS, JavaScript
ExpiresByType text/css “access plus 1 month”
ExpiresByType text/javascript “access plus 1 month”
ExpiresByType application/javascript “access plus 1 month”
# Others
ExpiresByType application/pdf “access plus 1 month”
ExpiresByType application/x-shockwave-flash “access plus 1 month”
</IfModule>
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress
# BEGIN Vary Accept Encoding Header
<IfModule mod_headers.c>
<FilesMatch “.(js|css|xml|gz|html)$”>
Header append Vary: Accept-Encoding
</FilesMatch>
</IfModule>
# END Vary Accept Encoding Header
# LBROWSERCSTART Browser Caching
<IfModule mod_expires.c>
ExpiresActive On
ExpiresByType image/gif “access 1 year”
ExpiresByType image/jpg “access 1 year”
ExpiresByType image/jpeg “access 1 year”
ExpiresByType image/png “access 1 year”
ExpiresByType image/x-icon “access 1 year”
ExpiresByType text/css “access 1 month”
ExpiresByType text/javascript “access 1 month”
ExpiresByType text/html “access 1 month”
ExpiresByType application/javascript “access 1 month”
ExpiresByType application/x-javascript “access 1 month”
ExpiresByType application/xhtml-xml “access 1 month”
ExpiresByType application/pdf “access 1 month”
ExpiresByType application/x-shockwave-flash “access 1 month”
ExpiresDefault “access 1 month”
</IfModule>
# END Caching LBROWSERCEND

That all at .htaccess