• Resolved verityr

    (@verityr)


    Hi,

    There are two Ukraine IPs that continue to attempt to break into my account through xmlrpc.php:
    46.148.22.18 and 46.148.18.162
    Today I see they’ve been blocked about 15 times. Are they actually being blocked? My question is why would they still continue to be breaking in if they weren’t?

    Thank you,

    Jennifer

    https://www.ads-software.com/plugins/ip-geo-block/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi verityr,

    Thanks for choosing this plugin.

    > Are they actually being blocked?

    Definitely, yes if you see “blocked” in your “Logs” tab.

    > My question is why would they still continue to be breaking in if they weren’t?

    Because they are not human but some kind of hacking tools. I don’t know much about such tools, but I guess they attempt to attack many sites at a time in parallel, and they’re only interested in the results which show success in their attempts.

    Recently, more people can get such tools and list of sites very easily. Those people are amateurs. If you select “Block by country” or “Prevent Zero-day Exploit” at “Plugins area” and “Themes area“, AND/OR select “Unauthenticated user” at “Record validation logs“, you will find a lot of malicious but unskilful accesses.

    So it is useless to worry about it. Only you should care about this issue is strengthen your password.

    Good luck!

    Thread Starter verityr

    (@verityr)

    Thank you very much for your quick and information reply!

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘I'm not sure if the plugin is working’ is closed to new replies.