Title: My site under attack
Last modified: August 24, 2016

---

# My site under attack

 *  Resolved [saltire](https://wordpress.org/support/users/saltire/)
 * (@saltire)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/my-site-under-attack/)
 * Hi my site [http://thinkaboutscotland.com](http://thinkaboutscotland.com) is 
   under attack from some kind of script. It’s coming from this IP 96.127.149.82.
   My web host has now restricted my account.
 * I have banned the IP but am still receiving thousands of attempts which create
   thousands of 404 warnings but no lockouts.
 * Any suggestions or help please.
 * [https://wordpress.org/plugins/better-wp-security/](https://wordpress.org/plugins/better-wp-security/)

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [dwinden](https://wordpress.org/support/users/dwinden/)
 * (@dwinden)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/my-site-under-attack/#post-6158154)
 * > I have banned the IP …
 * You manually added the ip address to the Ban Users box ?
 * If so please verify you have the following lines in your .htaccess file:
 * SetEnvIF REMOTE_ADDR “^96\.127\.149\.82$” DenyAccess
    SetEnvIF X-FORWARDED-FOR“
   ^96\.127\.149\.82$” DenyAccess SetEnvIF X-CLUSTER-CLIENT-IP “^96\.127\.149\.82
   $” DenyAccess order allow,deny deny from env=DenyAccess deny from 96.127.149.82
   allow from all
 * If the ip address is banned correctly in the .htaccess file any traffic from 
   that ip address will be blocked at the web server level.
 * However the attacker might switch to another ip …
 * dwinden
 *  Thread Starter [saltire](https://wordpress.org/support/users/saltire/)
 * (@saltire)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/my-site-under-attack/#post-6158161)
 * Hi, thanks for getting back to me so quickly. Firstly I’m glad to say it has 
   finally after many thousand attempts now stopped.
 * I did enter the IP in the ban user box in the normal way but it does not show
   in the htaccess file but all the others I banned do show in the htaccess file
   in the order I banned them.
 * Can I manually add the to htaccess or is there a bigger problem?
 * Thanks
 *  Thread Starter [saltire](https://wordpress.org/support/users/saltire/)
 * (@saltire)
 * [10 years, 11 months ago](https://wordpress.org/support/topic/my-site-under-attack/#post-6158163)
 * Okay forget the above. I tried clearing the cache and and adding the IP again.
   This time it has saved in the htaccess file which hopefully will do the job if
   it happens again.
 * Thanks again for your help

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘My site under attack’ is closed to new replies.

 * ![](https://ps.w.org/better-wp-security/assets/icon.svg?rev=3529351)
 * [Kadence Security – Password, Two Factor Authentication, and Brute Force Protection](https://wordpress.org/plugins/better-wp-security/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/better-wp-security/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/better-wp-security/)
 * [Active Topics](https://wordpress.org/support/plugin/better-wp-security/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/better-wp-security/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/better-wp-security/reviews/)

 * 3 replies
 * 2 participants
 * Last reply from: [saltire](https://wordpress.org/support/users/saltire/)
 * Last activity: [10 years, 11 months ago](https://wordpress.org/support/topic/my-site-under-attack/#post-6158163)
 * Status: resolved