Viewing 11 replies - 1 through 11 (of 11 total)
  • Thread Starter Sam Singh

    (@sam-singh)

    Now, locked out users increased from 30 to 35. They are from Russia, georgia, kazakhstan, sydney, etc.

    Thread Starter Sam Singh

    (@sam-singh)

    Still my site is under attack. 38 users locked out. Please help….!!!!!!!!!!

    Mike

    (@thewordpressdude)

    Hi Sam,
    Have you blocked the IP’s of the users trying to log in? You can do that manually in the Live Traffic section or set the plugin to auto block anyone trying to log in with a user ID that does not exist in your system. You can even block users trying certain user IDs. (See the Options section) These blocks are only temporary however, so you can go to your “Blocked IPs section and make them permanent. That way they can no longer access your site.
    I hope that helps.
    Mike

    Thread Starter Sam Singh

    (@sam-singh)

    Help me please. still my site is under attack. Now its 105 user locked out.
    Please Help….!!!!!!!!

    Thread Starter Sam Singh

    (@sam-singh)

    Thank you for answer mike. Please tell me how to auto block anyone trying to log in with a user ID that does not exist in your system?

    Please guide me.

    Mike

    (@thewordpressdude)

    Hi Sam,
    First, make sure that you have marked the setting to “Immediately lock out invalid usernames” in the Login Security Options section of the Options tab.

    Then, when you go to the Wordfence Blocked IPs section, you should see IPs that were blocked. There will be an option to [make permanent] Click that and the IP will no longer be able to access your site.

    Thread Starter Sam Singh

    (@sam-singh)

    Hi,

    Thank you for replying.

    Is it safe to login my WordPress dashbord because still i am receiving emails regarding users locked out. Till now i have received 122 emails.

    One more thing mostly users are from russia and they have different IP’s. So, should i block all IP’s or IP range or block country?

    Mike

    (@thewordpressdude)

    Hi Sam,
    Yes, there should be no problem with you logging into your admin panel. Many times hackers use IP cloaking services to gain the use of multiple IP numbers. That is probably why you are seeing so many different IP numbers being blocked. As far as blocking out a whole country, you would want to be SURE that you are not going to have any customers from that country before setting that option.
    Cheers,
    Mike

    Thread Starter Sam Singh

    (@sam-singh)

    Hi,

    Ok. Thank You for helping me. Lets see if these attempts stop after making these changes.

    Thank You so much Mike.

    Mike

    (@thewordpressdude)

    Glad to help! ??

    Plugin Author WFMattR

    (@wfmattr)

    Thanks for pitching in, Mike!

    Sam: Let us know if you have any more trouble or need help adjusting your options. These types of attacks are pretty common, and usually don’t cause too much trouble as long as you have a plugin like Wordfence installed, but they can be unnerving the first few times that you see them happen.

Viewing 11 replies - 1 through 11 (of 11 total)
  • The topic ‘My site is under big attack. Please help’ is closed to new replies.