WordPress.org

Ready to get started?Download WordPress

Forums

WordPress Firewall 2
Thank you (18 posts)

  1. brunsona
    Member
    Posted 2 years ago #

    Your plugin caught 78 attacks on my blog this morning in a 5 minute period.

    It catches a few attacks most days but this was amazing. And that was the number of unique emails I received, there may have been more that were repeats.

    I added the ip address to blacklist on my .htaccess file and agree that it would be great to have that capability in the plugin. Actually, I like to be able to let it block any ip creating a security violation x number of times in x seconds.

    Thanks, again, for this. I appreciate your efforts.

    -a-

    http://wordpress.org/extend/plugins/wordpress-firewall-2/

  2. DoZ
    Member
    Posted 2 years ago #

    Hey, Brunsona, how do you blacklist an IP address?

  3. brunsona
    Member
    Posted 2 years ago #

  4. DoZ
    Member
    Posted 2 years ago #

    thanks :)

  5. Florence
    Member
    Posted 2 years ago #

    Hi brunsona,

    I'm a new website owner and also very happy with the Firewall. Lately, however, I keep getting attacks from the same IP adress. Like DoZ, I would also like to ban this adress. I read the article, but, where do I put the code?

  6. brunsona
    Member
    Posted 2 years ago #

    Florence,
    You put the code in a file named .htaccess located in the root directory of your web site - the same place where your WordPress files are located.

    To deny access to a single IP address and allow everyone else, paste this code into your .htaccess file and change the 100.100.100.1 to the IP you want to block.

    Order allow,deny
    Deny from 100.100.100.1
    Allow from all

    You can create a .htaccess file with any text editor. Just open a blank text file and save it with the name .htaccess. Then FTP it to your site. Paste the blocking code in, change the IP address as needed, add more lines with "Deny from" and another IP, etc.

    There are lots of other good uses for a .htaccess file and Google will give you links to tutorials and info.

    Hope this helps,
    -a-

  7. Florence
    Member
    Posted 2 years ago #

    Thank you for the quick response! That sounds complicated but I'll try. I'm getting attacked in waves of 20 every 15 minutes. Do you think I'm at risk? Will they be able to get in? I have no idea what to do...

  8. DoZ
    Member
    Posted 2 years ago #

    Hey you, nice lady!
    Try this:
    http://wordpress.org/extend/plugins/wp-ban/
    :)

  9. Florence
    Member
    Posted 2 years ago #

    Ah thank you! Much easier!
    As we say in the Netherlands: hartstikke bedankt!

  10. Florence
    Member
    Posted 2 years ago #

    Ok don't laugh at me but... I have managed to ban myself! WordPress Firewall 2 identified an offending IP adress and when I banned it, I found out it was me. So I guess I'll have to log in with on another computer and unban my IP adress.
    But how strange that it was me?!

  11. questions4wp
    Member
    Posted 2 years ago #

    You could also use a proxy, log in and then unban yourself (I'm not sure if you realize, but if you use a different computer on the same network, like your home network, you'll likely have the same external IP address). If you do use a proxy or a public computer, be sure to clear any logs and change your passwords!

    As a sidenote, was it your IP address that was "attacking" your website in waves of 20 every 15 minutes, or was that a different address?

  12. DoZ
    Member
    Posted 2 years ago #

    Maybe you are on a shared IP? Or maybe you have your own virus on your own Pc?? ... ?_?
    Next time you should check first at the top of Ban options page, where it says your IP, Host name, etc.

    (PS: in Italy we say 'grazie mille')

  13. Florence
    Member
    Posted 2 years ago #

    I managed to unban myself by logging in with a smartphone. But yeah, it was definitely my IP adress. I don't get it... But it has stopped for now...

  14. Florence
    Member
    Posted 2 years ago #

    @ DoZ.. According to my McFee protection my laptop is clean... I'm on a secure wireless internet connection at home. Curious aye...

  15. DoZ
    Member
    Posted 2 years ago #

    Happy for you.
    Remember: as I did learn by myself there's a pugin for everything!

  16. MickeyRoush
    Member
    Posted 2 years ago #

    Florence wrote:

    @ DoZ.. According to my McFee protection my laptop is clean... I'm on a secure wireless internet connection at home. Curious aye...

    If you're talking about McAfee, then you could still have an infection on your PC. I've worked on PCs for a living for a very long time and I just cleaned one up that was hi-jacked by the FakeAlert virus that McAfee did not detect/prevent/nor remove.

    Please consider Malwarebytes, SuperAntiSpyware, and there is other freeware out there that can help protect you. McAfee is not good enough by itself.

  17. Florence
    Member
    Posted 2 years ago #

    Really?! It's freakin expensive! I would hope it keeps my laptop safe...

  18. MickeyRoush
    Member
    Posted 2 years ago #

    Florence wrote:
    Really?! It's freakin expensive! I would hope it keeps my laptop safe...

    Well there are free versions of Malwarebytes and SuperAntiSpyware that can be used in addition to McAfee. I personally wouldn't recommend McAfee to a home user. They have some okay Corporate Editions, but for home usage you could probably get away with using AVG Free or Avast! instead of McAfee. Before your McAfee license expires, you might want to research the options I've mentioned. There are more options, these are just the most relevant.

    **NOTE**
    No one anti-virus application will protect you from everything. Hackers are like ten steps ahead of any anti-virus program. Anti-virus programs can only update their definitions/signatures after they find something or if it's already been in the wild and possible ideas on what could be coming (the same should be said for WordPress security). Just hope that you're not someone's first victim. :(

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic