WordPress.org

Ready to get started?Download WordPress

Forums

Botnet Attack Blocker
[resolved] Plugin exploited? (8 posts)

  1. Stephen
    Member
    Posted 10 months ago #

    Trying to figure out why the plugin randomly blocked us out. When I delete plugin, reinstall, I go to the settings page and try to whitelist my IP but it gives me an error saying it can not update IP. We log into the site with our facebook accounts so there is no reason the block I have set should block me and another administrator out.

    http://wordpress.org/extend/plugins/botnet-attack-blocker/

  2. cheesefather
    Member
    Plugin Author

    Posted 10 months ago #

    Hi, I haven't heard of this happening to anyone else, it's possible that someone was trying to log into your site at the same time as you and locked you out.

    Was the error "update failed" or another error? What did you have in the IP field?

    Thanks.

  3. Stephen
    Member
    Posted 10 months ago #

    The IP field was my own IP address. I just have decided to take the plugin off the sites I installed it on, as wordfence helps me track potential hackers/bots. It happened on another website of mine a few days ago where I was locked out by someone attempting to bruteforce the admin (which on that site I do not have have a user with admin as I used a different login).

    The error just said update failed when I input my ip address on the settings page. I had deactivated the plugin, and reactivated it, and then tried the settings page but that is what happened so I rendered it not usable for the time being.

    If there is anything you'd like me to do or provide, then let me know, unless it's just user error not knowing that it locks out everyone from accessing the site when a bot or person tries logging in with a useless bruteforce attack.

  4. cheesefather
    Member
    Plugin Author

    Posted 10 months ago #

    It does indeed block everyone from logging in (to prevent distributed botnet attacks that come from hundreds of different IPs at the same time) irrelevant of usernames or IPs - it sounds like that's not what you were expecting it to do!

    However, you still should've been able to update the settings in the database. It's very standard WP code to create and update the settings and I can't recreate your issue at all. I'll keep trying :(

  5. Stephen
    Member
    Posted 10 months ago #

    What happened was I had gotten blocked, then I had simply removed the plugin off the server via FTP. Then I was able to log back into wordpress, reinstall the plugin. Went to settings page, put my ip address in, clicked update and then it gave me the error I mentioned.

    When I get the time I'll try it out again, however are there any tables in the database that I can try to remove completely to start fresh? Have not checked to see what it may be called as I was going to wipe it.

  6. cheesefather
    Member
    Plugin Author

    Posted 10 months ago #

    In the wordpress options table (usually wp_options) there's a field created called bab_options which contains the array of settings. Sounds like it may have prevented the update as you were locked out at the time - I'd have to check the code.

  7. Stephen
    Member
    Posted 10 months ago #

    Yeah your plugin doesn't have a way to uninstall any table settings. That might help for those that uninstall or have issues.

  8. cheesefather
    Member
    Plugin Author

    Posted 10 months ago #

    Thanks, I'll add that to the roadmap.

Reply

You must log in to post.

About this Plugin

About this Topic

Tags

No tags yet.