Wordpress Block

Category: Wordpress

garrettg
Asked:
2013-04-17 6:35 pm EST

Hits: 877
I am well aware of the attack on Wordpress. I have gone through your instructions and I have added IP restrictions to my blogs, however even though I can get to the login page the first time, when I actually try to login, it blocks access with the "WordPress Login Temporarily Disabled" message.

I have a couple dozen Wordpress installations. It seems to me like your block is based on every access to "wp-login.php" under my account, regardless of if they are on different domains.

I also read through your other suggestions, but the problem is that I have lots of Worpdress installations and it's hard to be sure I have fixed every one.

Do you have alternatives or any better suggestions to deal with this?

Thanks.

You must login before you can ask a follow up question.

You must login before you can submit an answer.

OTHER ANSWERS

-1

Arn
Staff
15,484 Points
2013-04-17 6:57 pm EST
Hello Garretg,

The problem that you're facing may possibly involve Wordpress plugins hitting the login page and causing the mod_security to activate. Please try disabling any Wordpress Login plugins first. The .htaccess changes that were provided are supposed to screen out the brute force attackers and then immediately allow access to the Wordpress login. For possible review (I'm not sure if you're using the same thing as before): Using HTACCESS to block unwanted users.

If you have any further questions, please contact technical support available 24 hours a day / 7 days a week.

Regards,

Arnel C.
Community Support

You must login before you can post a comment about this answer.

I am getting this error...


WordPress Login Temporarily Disabled

We apologize for the inconvenience! You are seeing this message because your site has recently been targeted by attackers attempting to gain access to your WordPress Dashboard. In order to protect your site your WordPress Login page has been temporarily disabled.

This is due to a security filter you have on my server and it sucks! I have 300 employees registered on my site and they hit the login.php every morning and this stupid filter crashes my site. I had you remove it and it worked great until something switched it back on. Now I am spending hours trying to get your crack team to flip a goddamn switch and I'm sick of it. Your support is seriously in need of help, I have been waiting for 20 minutes on your phone, chat and email and it is ridiculous. I hope you post this so others will know how lousy your support is. This issue took less than 5 minutes to fix last time but hours on the phone waiting. I will NEVER recommend your service to anyone, you and a long list of clownshoes who have claimed "award winning support" and only given that to their high-contract clients.
jweaver
3 Points
2013-09-17 11:52 am EST
Hello jweaver, sorry for the issues.

I'm not sure if you're aware of the very large WordPress brute force attack that has been taking place since mid April. But essentially as an emergency response to this our senior system administration team rolled out some security rules to protect our customer's WordPress websites from being compromised.

I'm not sure why if you had this disabled for you, why it would have been re-enabled. Other than looking at your account notes it would seem as if you had recently switched servers. So I'm guessing on the new server since these security rules are now default, they went active again.

I definitely apologize for the lack of support you've received on the issue :( I've gone ahead and disabled these WordPress rules for you following my guide on how to find and disable specific ModSecurity rules.

I'll continue to monitor your error logs to see if I see any further ones slip by, but I believe I've got them all. If you're still having any further issues at all please let us know and I'd be glad to take another look!

- Jacob
JacobIMH
9,521 Points
Staff
2013-09-17 12:37 pm EST
Like this Question?

Related Articles

It looks like there are no related articles.
Would you like to ask a question about this page? If so, click the button below!
Ask a Question

Need more Help?

Search

Ask the Community!

Get help with your questions from our community of like-minded hosting users and InMotion Hosting Staff.

Current Customers

Chat: Click to Chat Now E-mail: support@InMotionHosting.com
Call: 888-321-HOST (4678) Ticket: Submit a Support Ticket

Not a Customer?

Get web hosting from a company that is here to help. Sign up today!