Site Blocked my IP, now can’t login.
-
WP Cerber has no indication of why this is happening anywhere in the config, plugin, etc. I am now permanently banned from my own site with no way of resolving the issue. Even uninstalling WP cerber does not allow computers on my home network to connect to my wordpress installation in the cloud.
I mistyped my username.
WP Cerber was set to immediately block IP after inputting non-existent username.
In Cerber activity it shows that my IP was blocked.
Cerber blocked list does not indicate that any IPs are blocked.
Still cant connect to my WP unless I use my phone’s hotspot to give my laptop internet, instead of home router.
Is there a way “behind the scenes” to reset this permission- or to change whatever file WP cerber modified to block access?
As of now this is completely destructive with no ability to resolve. Disgusting.
-
My IP was blocked in Cerber. This is indisputable fact. From that exact moment on, I have been unable to access the site with any device behind the IP address that received the block.
Everything else connects just fine.
The Access List / Blocked page does not have any entries. I have even whitelisted the ip / range. No fix.
WP Cerber banned me from my own site.
[Edit 1]: Furthermore- the Lockouts (even from the exact moment of blocking the IP) table has been empty when viewed from the WP console.
[Edit 2]: WP Cerber obviously does store something somewhere other than in the Plugins folder, as after removing it entirely then re downloading and installing a fresh version restores previous entries in the history.
Try some basic troubleshooting steps.
1) Get your ip address https://get.youripfast.com/
2) CALL your hosting provider and ask them if THEY have blocked your ip for any reason.
3) Rename the cerber plugin folder wp-content/plugins/wp-cerber to wp-cerber.bak (this will disable the plugin.) You can use filemanager in cpanel to do this.
4) Now try to login. If disabling the plugin allows you to login now then it’s wp-cerber’s problem, otherwise it’s something else.@ avpman- First things first, I am a full-time Network Engineer professionally. “Some basic troubleshooting steps” are what I have most assuredly already completed. That tone doesn’t help the issue at hand.
Responding to your instruction step by step:
1.) IP and entire Subnet verified both externally and internally.
2.) Hosting provider and ISP on both sides are not blocking traffic either direction regarding the 2 ip’s in question.
3.) WP-Cerber plugin removed, renamed, re-added from backup, re-added from core, etc.
4.) Disabling the plugin did not restore access.read next section before responding–
@gioni: Website is not behind a proxy. Router is not behind a proxy.
The very instant that WP Cerber BLOCKED IP, the router and all devices behind it lost access to the server. IMMEDIATELY checking the site access from other networks showed two things: 1.) ONLY this network was blocked, and 2.) NOTHING was indicated on Lockout page, only on the activity history page.
To finalize: completely removing the entire WP-Cerber plugin, then installing a NEW and FRESH install did “NOT” install a NEW and FRESH installation. It retained all activity logs and settings.
THUS: WP-Cerber is either modifying or storing files somewhere OTHER than in it’s own Plugin folder.
Where does WP-Cerber SPECIFICALLY block an IP address? Which file exactly?
This is beyond infuriating; the plugin blocked network connectivity, immediately reported it, but did not display it through block logs. This plugin is screwing me real hard right now.
As of today- the problem is no longer interfering with my ability to access the site because I managed to get my ISP to change my IP address– this took 36 hours of waiting for a DHCP reservation to fall of, meaning WP Cerber took my home out of internet commission for 36 hours, and prevented access to my website itself for a few days.
This is still very much a fatal design flaw in the implementation of WP Cerber that makes it an unreliable and dangerous tool that WILL block communications to your server and not indicate how to remove this block from being in effect.
In troubleshooting; I removed everything from the site in attempt to isolate the issue to anything other than WP Cerber (the plugin that did the initial block– view the image I submitted earlier in this thread for the proof).
Nothing resolved the issue. The exact IP that WP Cerber blocked was unable to reach the front end of the wordpress site (lo-and behold, the only part that WP Cerber has ability to access– devices behind that fronting WAN IP were able to get through to the server just fine).
Here is an issue that needs to be resolved, and is a reiteration of above: if you completely remove WP Cerber’s folder from the Installed Plugins root folder, then install a COMPLETELY NEW AND FRESH INSTALL, it will retain 100% of the prior configuration and activity history. This flies in direct disregard of Gioni’s statement that the Plugin Folder is the only location WP Cerber stores data.
This means that WP Cerber is unreliable, untrustworthy, and ultimately a damning piece of software. If the author’s words fly in the face of truth, don’t trust their code.
James
@gioni – two things are true.
1.) You have an issue that is affecting multiple users due to somewhere that WP Cerber is blocking “failed username” login attempts.
2.) WP Cerber stores information SOMEWHERE outside its own plugin installation folder. This I have verified multiple times by deleting the entire plugin folder and rebuilding the plugin database from scratch (meaning 0 plugins). After then downloading a new version of the Plugin directly from this site and dropping those files into the NEW Plugins folder, WP Cerber has a complete log and all its original settings from before the directory rebuild.
This issue either A.) Needs to be resolved, or B.) this plugin needs to be pulled from the market until further troubleshooting can resolve this issue.
James
- The topic ‘Site Blocked my IP, now can’t login.’ is closed to new replies.
