verityr

I’m back. ?? I saw one Duckduckgo referral this morning. When I went to the logs, I noticed a difference, there is an “extra” in the result column. What do you think? Thank you,

Jennifer

I added it. I’ll be back in a few days to let you know if it’s working! ?? Thank you,

Jennifer

Oh ok, I didn’t know you could mark it resolved and I could come back. ??

So, they didn’t give up, they’re back. I’ve never edited functions.php before. Do I copy and paste everything in Example 7 into it, and is there a special place to put it?

Thanks again in advance!

I will do that as soon as they start attacking my site again. Unfortunately I can’t check it out now because I haven’t seen a Duckduckgo IP in 2 days. Can you leave this thread open for a few days so I can wait to see if they come back? I don’t know why all of a sudden they stopped. Maybe they gave up? ??

Yes, I want to keep ALL hackers away. It all messes up my statistic, which are mostly hackers. Something I noticed about all of these IPs in my Logs under Login is that duckduckgo all have the ISP amazon technologies and amazonaws. Is amazonaws a disguise for amazon?

Thanks again,

Jennifer

Thank you for all your help. All of the IPs coming from Duckduckgo have POST in the logs (POST[80]:/wp-login.php). This is all new to me. I’ve never had a site that was under constant attack, but just from specific groups, such as Ukraine, Russia, Netherlands and Duckduckgo. Are they finding my site in the Duckduckgo search engine and then trying to login? I’m just curious how Duckduckgo is being associated. Thanks again.

I apologize, I was never notified through email that you had replied.

I will try #2, the htaccess file. Thank you!

Jennifer

Thank you very much for your quick and information reply!

Woohooooo, awesome! Thank you!

For me, yes.

I just had to add that those two IPs are always trying to break into my backend as well. The first one has tried five times today so far.

Thank you for your help.

Deselecting “send headers when user is blocked” worked for me when I blocked my own country on the frontend. It also showed that there was frontend blocked attempts. I guess I’ll should assume that the backend attempts are being blocked from the countries I’m having trouble with, except it doesn’t show that their attempts were blocked, like it’s showing on the frontend.

Ok, I tried blocking myself in the frontend. The following is what I saw when I tried to view my site from my laptop and from my phone (different IP). Is this normal?

Warning: Cannot modify header information – headers already sent by (output started at /wp-content/themes/zerif-pro/header.php:19) in /wp-content/plugins/iq-block-country/libs/blockcountry-checks.php on line 332

Warning: Cannot modify header information – headers already sent by (output started at /wp-content/themes/zerif-pro/header.php:19) in /wp-content/plugins/iq-block-country/libs/blockcountry-checks.php on line 333

Warning: Cannot modify header information – headers already sent by (output started at /wp-content/themes/zerif-pro/header.php:19) in /wp-content/plugins/iq-block-country/libs/blockcountry-checks.php on line 334

Warning: Cannot modify header information – headers already sent by (output started at /wp-content/themes/zerif-pro/header.php:19) in /wp-content/plugins/iq-block-country/libs/blockcountry-checks.php on line 335

Warning: Cannot modify header information – headers already sent by (output started at /wp-content/themes/zerif-pro/header.php:19) in /wp-content/plugins/iq-block-country/libs/blockcountry-checks.php on line 337

They’re still getting through, one just came from Ukraine again.

I will try the new release!