• An ip of 91.200.12.22 is contsantly trying to hack at my site
    Invalid Login Attempt 5 2016-02-15 22:48:57 91.200.12.22
    using a Username that has now been removed.

    I set the Ip in the Ban Hosts area, even going as far as 91.200.*.*
    and still the logs show this IP is still trying…

    Does adding the Ip to the Ban Hosts area not stop them trying???

    How can I stop this ip from going anywhere near my site??

    https://wordpress.org/plugins/better-wp-security/

Viewing 2 replies - 1 through 2 (of 2 total)
  • @pete

    Make sure the Write to Files setting in the Global Settings section of the iTSec Settings page is enabled.

    Assuming you are using Apache as your Web Server the following lines should show up in the .htaccess file:

    [ Moderator note: code fixed. Please wrap code in the backtick character or use the code button. ]

    # Ban Hosts - Security > Settings > Banned Users
    SetEnvIF REMOTE_ADDR "^91\.200\.[0-9]+\.[0-9]+$" DenyAccess
    SetEnvIF X-FORWARDED-FOR "^91\.200\.[0-9]+\.[0-9]+$" DenyAccess
    SetEnvIF X-CLUSTER-CLIENT-IP "^91\.200\.[0-9]+\.[0-9]+$" DenyAccess
    
    <IfModule mod_authz_core.c>
    	<RequireAll>
    		Require all granted
    		Require not env DenyAccess
    		Require not ip 91.200
    	</RequireAll>
    </IfModule>
    <IfModule !mod_authz_core.c>
    	Order allow,deny
    	Allow from all
    	Deny from env=DenyAccess
    	Deny from 91.200
    </IfModule>

    dwinden

    @pete

    If my previous post helped you solve this issue please mark this topic as ‘resolved’.

    dwinden

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Ip address still hacking’ is closed to new replies.