• Resolved hopskip

    (@hopskip)


    China, now Mexico, are getting in and signing up as a User.

    They are using buddypress to hack and get in, it seems since I see them using “Group” (which I don’t use).

    I didn’t get a reply so posting again.

    Everything is Always Updated each day.

    Is there another Security to use along with yours?

    Thanks

    https://www.ads-software.com/plugins/wordfence/

Viewing 4 replies - 1 through 4 (of 4 total)
  • Are sure you have been hacked? This looks like being spammed instead.

    Hello hopskip,

    We have used workfence for a long time and have also tested other methods to stop spam signups.

    Consider that you could possibly have malware on your site that is allowing spammers to circumvent normal registration processes. You might try disabling WP registration for a few hours and if new signups still happen, then that may be the root cause.

    Also, you might try changing your Wordfence firewall configuration settings to be more restrictive.

    We have used several in combination and have reduced spam signups to only a few per week and they seem to be real people.

    You might try activating Jetpack Protect which provides similar deterrents as WP Math Captcha.

    Also try:

    Akismet
    https://akismet.com/

    WP Math Captcha (if not using Jetpack)
    https://www.ads-software.com/plugins/wp-math-captcha/

    Zero Spam
    https://www.ads-software.com/plugins/zero-spam/

    BWP reCaptcha – uses newest Google reCaptha v2 API
    https://www.ads-software.com/plugins/bwp-recaptcha/

    Best of luck!

    Thread Starter hopskip

    (@hopskip)

    They signed in, after many attempts, bypassing the registration and membership plugin, and paypal. 3 times.

    That would be hacked. Right fixmywp? seems so. what other word would you call all that?

    Thread Starter hopskip

    (@hopskip)

    @ soobahkdo, Thanks.

    I’m not using WP Registration (that I know of) It’s a membership plugin.

    They are coming in Not using my Membership plugin. It’s a deactivated bp User which is not the login way.

    Haven’t changed WF config. Will try your sugg.

    I don’t wish to pay for akismet. prob should just delete it.

    Will ck into Zero, bwp, Math

    Thanks! Have a Fun Day! ??

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘More hackers are getting in, last few days’ is closed to new replies.