Quantcast
Channel: help – WordPress.org Forums
Viewing all articles
Browse latest Browse all 13924

krashx6 on "wp-admin locked down through htaccess, but still getting TONS of login attempts"

$
0
0

@IT Expert

I followed per your advice, but I still am getting the login attempts. There is slowly more and more. Below is a copy/paste of my .htaccess that is in the root directory of wordpress.

Does it look okay?
Any suggested changes?
Should I copy/paste this .htaccess to the /wp-admin/ folder?

Thanks.

# protect the htaccess file
<files .htaccess>
order allow,deny
deny from all
</files>

# disable the server signature
ServerSignature Off

order allow,deny
deny from 195.88.31.48
deny from 46.172.244.149
deny from 41.249.5.178
deny from 78.172.104.63
deny from 201.196.15.109
allow from all

<files wp-login.php>
order deny,allow
allow from 50.89.200.63
allow from 50.89.58.21
allow from 75.112.151.98
deny from all
</files>

<files wp-admin.php>
order deny,allow
allow from 50.89.200.63
allow from 50.89.58.21
allow from 75.112.151.98
deny from all
</files>

<files wp-config.php>
order allow,deny
deny from all
</files>

<files ~ "^.*\.([Hh][Tt][Aa])">
order allow,deny
deny from all
satisfy all
</files>

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_METHOD} POST
RewriteCond %{REQUEST_URI} .(wp-comments-post|wp-login|wp-admin)\.php*
RewriteCond %{HTTP_REFERER} !.*jessiedee.net.* [OR]
RewriteCond %{HTTP_USER_AGENT} ^$
RewriteRule (.*) ^http://%{REMOTE_ADDR}/$ [R=301,L]
</IfModule>

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

Viewing all articles
Browse latest Browse all 13924

Trending Articles