WordPress.org

Ready to get started?Download WordPress

Forums

iThemes Security (formerly Better WP Security)
[Plugin: Better WP Security] Sends multiple lockout and database mails per day (9 posts)

  1. nowton
    Member
    Posted 1 year ago #

    As per title: we have this installed on a customer's website as we got 5 to 10 emails per day with database backups attached, sometimes no attachment, and multiple mails about lockouts for the same IP. I have deactivated the plugin for now. Anyone experienced the same issue?

    http://wordpress.org/extend/plugins/better-wp-security/

  2. DoctorMicro
    Member
    Posted 1 year ago #

    Yes, I have this, but most of the time it's from a foreign country and is poking around my site, trying to find a way to hack it.

    You can take and copy the IP address and then go to click on Ban Users, then about half way down the page between the two white boxes you will see a link, Lookup IP Address, click that link and it will open another page and in the UPPER LEFT box Paste that IP and hit enter and it will show you a page with all the info it can about this IP and where it's located.

    Then you can see if it's a bad person or someone that may be OK, 99% of mind are all bad.

  3. nowton
    Member
    Posted 1 year ago #

    How about if I tell you one of the IPs listed is our own external IP. I'd call that a false positive. It doesnt explain the multiple lockouts and multiple database backups either...

  4. The backups is an ongoing bug I haven't had time to crush. It should only send 2 however unless you have database query caching enabled.

    As for the IP, what kind of lockouts were they and how far apart were the emails?

  5. nowton
    Member
    Posted 1 year ago #

    Kind: "...due to too many attempts to open a file that does not exist." At 10:00, 10:09,10:09,10:27,10:27,10:30 and 11:03.

  6. OK. Interesting. I will look into the issue and see if I can duplicate.

  7. I've changed the hook on the backups (still looking into the other) in the development version. Can you please check and see if it works for you?

  8. By the way, are you using any reverse proxy services such as varnish or Cloudflare?

  9. nowton
    Member
    Posted 1 year ago #

    Unable to respond until week 1 of August, 2012, sorry.

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic