Locked out

  • pta3

    (@pta3)


    8 years, 9 months ago

    The first one is that we have been locked out of the website http://www.planestrainsautomobiles.co.uk twice within a couple of days and receive the below message.

    We have received this message twice now within a couple of days. The first time we contacted our host Go Daddy who reset our password.

    I have tried to reset it again but we are still locked out. Can anyone explain why this is happening to our website and what we can do to stop it?

    For your security, your account has been locked because of too many failed login attempts. To unlock your account please click the following link:

    http://www.planestrainsautomobiles.co.uk/wp-login.php? (

    The following attempts resulted in the lock:

    178.125.167.16 2015/07/03 8:52:42 PM
    178.94.172.122 2015/07/03 8:58:15 PM
    87.117.12.84 2015/07/03 9:04:08 PM
    88.135.241.150 2015/07/03 9:10:34 PM
    89.204.72.71 2015/07/03 9:17:00 PM

Viewing 7 replies - 1 through 7 (of 7 total)
  • neilfarrell

    (@neilfarrell)

    8 years, 9 months ago

    It looks like users from those ip addresses are trying to login to your backend and GoDaddy are locking the account to stop hacking/intrusion. I would look at some security plugins to help you out.

    Or possibly lock down your login page to a specific ip address. This can be difficult if you don’t have a static ip address

    Clayton James

    (@claytonjames)

    8 years, 9 months ago

    That specific message string..

    “For your security, your account has been locked because of too many failed login attempts. To unlock your account please click the following link:”

    ..can be found in the file security.php of the Theme My Login plugin. Are you using that particular plugin by any chance? If not, are you using any other plugin with brute force security features?

    [edit] Did the failed login attempts from those 5 addresses all use the same username?

    Thread Starter pta3

    (@pta3)

    8 years, 9 months ago

    Hi, I have contacted Go Daddy again who have disabled the theme and the plugins. They think its the theme but I’m still not sure.

    We are using the Newspaper theme which appears to be causing some issues. Our categories have been added using a Mega Menu with images so that a post is created. On two occasions now the images have just gone without us doing any updates.

    Clayton James

    (@claytonjames)

    8 years, 9 months ago

    You haven’t answered what could be an important question.

    Are you, or were you, using the Theme My Login plugin?

    Thread Starter pta3

    (@pta3)

    8 years, 9 months ago

    No, not using that.

    Thread Starter pta3

    (@pta3)

    8 years, 9 months ago

    We did have WangGuard and Bulk Delete, but we have not activated them this time.

    Clayton James

    (@claytonjames)

    8 years, 9 months ago

    I’ll take your word for it, though I see can the most recent version of that plugin in your plugins directory.

    wp-content/plugins/theme-my-login/readme.txt

    Some relevant discussions about the plugin if you think that might have been a related issue at some point in the past.

    site:wordpress.org/support “For your security, your account has been locked because of too many failed login attempts. To unlock your account please click the following link:”

    That link goes to Google, but the returns are all discussions that take place here in the forums surrounding your exact error message. Maybe something there will be of help.

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Locked out’ is closed to new replies.