Site Lockout Notification? What Does it mean

7 replies
  • SEO
  • |
For the Mail ID I have used in wordpress, a series of Site Lock Out Notification Mails are Pouring in and each of this mail have an different IP addresses and IP range, Is my site getting hacked, I am worried, any suggestions. Here's the image for reference any suggestions
#lockout #notification #site
  • Profile picture of the author Kherk Roldan
    it means that it detected some suspicious activity by a person (or computer) visiting your website, AND it has blocked that specific IP from visiting your site, temporarily. This security measure is intended to lock out people or computers that are searching for weaknesses in your site that they can manipulate to inject malicious code or otherwise hijack your website and wreak havoc.
    {{ DiscussionBoard.errors[10868071].message }}
    • Profile picture of the author Jahnavi Malyala
      What Should I do to get rid of this suspicious activity
      {{ DiscussionBoard.errors[10868369].message }}
      • Profile picture of the author Kherk Roldan
        Originally Posted by Jahnavi Malyala View Post

        What Should I do to get rid of this suspicious activity
        Let your WP security plugin do that job for you. I recommend you use ithemes security plugin to protect your Website.
        {{ DiscussionBoard.errors[10868598].message }}
  • Profile picture of the author michaelkoehler92
    Use wordfence or ithemes security plugin and block all actions if they do x number of invalid attempts.
    Also it seems like your website is down at the moment you must look into that too as they will affect your rankings.
    {{ DiscussionBoard.errors[10868546].message }}
  • Profile picture of the author vishwa
    It means that your site has been hit by numerous invalid login attempts. This is for sure a concerning issue. You have to monitor your site traffic and remove your url from unwanted source. Always use organic traffic sources.
    Signature
    Techbizmasters.com- Blogging, Technology, and Digital Marketing
    {{ DiscussionBoard.errors[10868741].message }}
  • Profile picture of the author Jahnavi Malyala
    Currently I am using WP Security Plugin and All the traffic to my website is organic only. Should i remove this WP security Plugin and activate Wordfence or itheme security plugin Or Install one of these without deactivating the earlier one
    {{ DiscussionBoard.errors[10869531].message }}
    • Profile picture of the author katefeesh
      Originally Posted by Jahnavi Malyala View Post

      Currently I am using WP Security Plugin and All the traffic to my website is organic only. Should i remove this WP security Plugin and activate Wordfence or itheme security plugin Or Install one of these without deactivating the earlier one
      Looks like your site's being hit by brute force attacks (hacker's assuming your username is 'admin'). These are pretty basic and can be solved by a range of different plugins with captcha, login attempt limiting etc features.

      Your WP security plugin seems to be working fine looking at the string of site lockout notifications. However security plugins are inadequate against more persistent and sophisticated attacks.

      I suggest finding a suitable (free?) web application firewall for your site that can help block brute-force tools WAFs act as security scanners to block traffic with suspicious intent from ever reaching your site. Cloudbric's a cloud-based WAF that provides login protection.
      {{ DiscussionBoard.errors[10893696].message }}

Trending Topics