InMotion Hosting Support Center

You have been locked out due to too many login attempts - IthemesSecur

Category: Wordpress

200 Points
2014-06-15 8:18 pm EST

Hits: 3,876
You have been locked out due to too many login attempts. this is what happens when i update to 4.2.13 current version of IthemesSecurity. the imomtionhosting tech in my cpanel renamed the ithemes directory for me and then i could login to my site. i installed 4.2.13 again fresh and i immediately got kicked out "You have been locked out due to too many login attempts." and so did the inmotionhosting tech who was logged into my site backend.

ps. this has happened to all 8 sites i've upgraded to 4.2.13 and no more than one attempt to log in on each site.
WP 3.9.1

You must login before you can ask a follow up question.

You must login before you can submit an answer.



11,186 Points
2014-06-16 8:05 am EST
From the research I have done on iThemes Security locking users out on their first attempt, it appears to be typically due to a theme or plugin that is repeatedly hitting locations that do not exist within WordPress and causing a complete lockout. I recommend removing iThemes Security, disabling all plugins and switching to another theme like Twenty Fourteen, and then reinstalling iThemes Security to see if that helps. If you are then able to log in again, begin enabling themes and plugins one by one until you are able to find the culprit.

You must login before you can post a comment about this answer.

i use 2014 theme only in all 34 of my sites, except one, but as the normal setup 2014 child theme points to the 2014 actual theme. i only use plugins that are the most popular and all my sites really are mostly identical in plugins used. i don't have a plugin that's less than 30K downloads. thanks for looking into this!

just now i see the plugin author responded to another person with this:
@nadworks forbidden means you've tripped the permanent blacklist feature. It sounds like you might have a lot of 404 errors from missing images or other items. I would recommend turning off 404 detection until you can fix those and remember that if my plugin is seeing them so is Google and other search engines. In the meantime you'll have to manually remove your ip from .htaccess.

doesn't sound like a good answer cause what have my WP sites done on their own to create 404 errors? i'm just a normal WP user, if there are too many 404 then WP / plugins created them without my knowledge.
200 Points
2014-06-16 9:55 am EST
The response from the plugin author does sound correct in that you may have permanently blacklisted yourself somehow. Unfortunately, I would have no way of finding out how you did so, but those steps to resolve the issue do sound correct.

Although the plugins you use may be popular, sometimes even the most popular plugins can sometimes interact with each other in strange ways that cause unexpected results.
11,186 Points
2014-06-16 10:20 am EST
jeff, i was just beginning to write a reply, i began to see how to remove my dynamic IP from the .htaccess file... i went to one of my sites that i know has 4.2.13 and i went right in without a block, and now several more sites i was blocked in are now ok. did IMH change something for me / us? cause i haven't done a thing yet to try to fix this but 3 sites i was locked out of i'm magically in the dashboard now. i go to cpanel filemanager i can see some code in blocked sites .htaccess file on sites with 4.2.13 installed. but sites i have NOT updated (still have ithemessecurity 4.2.8 there is no code in the .htaccess file). wondering cause i have dynamic IP address and i shut down my modem every few days which will change my IP address affecting any .htaccess fix). thank you!!!!
200 Points
2014-06-16 10:56 am EST
We did not change anything on your account so I am unsure of what happened. I'm thinking that something within the plugin could have run to make the change.
11,186 Points
2014-06-16 11:53 am EST
Like this Question?

Forum Login

You are NOT logged in. You can still browse our Support Center.

To participate within our Community Support Forum:

Need more Help?

Ask the Community!

Get help with your questions from our community of like-minded hosting users and InMotion Hosting Staff.

Current Customers

Chat: Click to Chat Now E-mail:
Call: 888-321-HOST (4678) Ticket: Submit a Support Ticket

Not a Customer?

Get web hosting from a company that is here to help. Sign up today!