Locked out

It looks like users from those ip addresses are trying to login to your backend and GoDaddy are locking the account to stop hacking/intrusion. I would look at some security plugins to help you out.

Or possibly lock down your login page to a specific ip address. This can be difficult if you don’t have a static ip address

That specific message string..

“For your security, your account has been locked because of too many failed login attempts. To unlock your account please click the following link:”

..can be found in the file security.php of the Theme My Login plugin. Are you using that particular plugin by any chance? If not, are you using any other plugin with brute force security features?

[edit] Did the failed login attempts from those 5 addresses all use the same username?

Hi, I have contacted Go Daddy again who have disabled the theme and the plugins. They think its the theme but I’m still not sure.

We are using the Newspaper theme which appears to be causing some issues. Our categories have been added using a Mega Menu with images so that a post is created. On two occasions now the images have just gone without us doing any updates.

You haven’t answered what could be an important question.

Are you, or were you, using the Theme My Login plugin?

No, not using that.

We did have WangGuard and Bulk Delete, but we have not activated them this time.

I’ll take your word for it, though I see can the most recent version of that plugin in your plugins directory.

wp-content/plugins/theme-my-login/readme.txt

Some relevant discussions about the plugin if you think that might have been a related issue at some point in the past.

site:www.ads-software.com/support “For your security, your account has been locked because of too many failed login attempts. To unlock your account please click the following link:”

That link goes to Google, but the returns are all discussions that take place here in the forums surrounding your exact error message. Maybe something there will be of help.