• Resolved Pam

    (@pb6933944)


    On two of my sites I am suddenly seeing a ton of attempts to login. I have shut down everything I know to shut down.

    I have my login page behind a hidden URL (where you change the slug to something only I know) and they get past that to the login page. I blocked certain UserID’s and the lockout event notifications are still showing that one of those is the UserID they are targeting, I’ve of course blacklisted the ranges with every email I get – but that list could go on forever. I have the captcha so I’m not sure what else to do. How are they even getting to the login page? P.S. I have changed that login page slug again, as well.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, have you enabled one of the following options? They are located under WP Security -> Firewall -> Basic Firewall Rules. If you haven’t I highly recommend that you do. Remember only enable one option.

    Completely Block Access To XMLRPC:
    Disable Pingback Functionality From XMLRPC:

    After a week or so, report back if you still have the same issue.

    Kind regards

    Thread Starter Pam

    (@pb6933944)

    This has seemed to work. Since the time I posted this I have had no more alerts – however, today is also the first time I’ve tried going back to the website since I set that. I had set it, saved it, logged out and didn’t try to login again until today. I have a Coming Soon plugin activated on that site and now…using my masked URL…I cannot get to the login page. It brings up my Coming Soon message.

    In case you need it the site is https://ontheporchwithjesus.org and the coming soon plugin is Coming Soon & Maintenance Mode by Seedprod.

    At this time I have no way (unless I go change file names) to access the backend of my site. thank you very much!!

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, our plugin has a Maintenance mode feature that allows you to set your site in maintenance mode while working on it. I highly recommend using this feature instead of another plugin. This will eliminate the current issue you are experiencing.

    Let me know if you need more help.

    Kind regards

    • This reply was modified 5 years, 7 months ago by mbrsolution.
    • This reply was modified 5 years, 7 months ago by mbrsolution.
Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Plugin Not Working as Expected’ is closed to new replies.