IP and blacklist

  • Resolved nimrod54

    (@nimrod54)


    6 years, 10 months ago

    Hi,
    I just updated WP Cerber on my 3 websites to the most recent version 6.0. They way I use the blacklist is, if I find a blocked IP address on the activity list, I add not just the single IP address but the IP network to the blacklist, if possible.

    The issues I have now:
    1) clicking on the IP adress in the activity list I still do get the two options offered – but clicking on “add network” does not work, just “add IP” adds the IP to the blacklist
    2) in the activity list I see a lot of IP addresses I added to the blacklist in the past, but now not being marked. An example: I added in the past IP range 185.86.167.0 – …255 to the blacklist. The IP shown on the activity list is 185.86.167.4, which was marked in Cerber 5.9. Since the update to Cerber 6.0 it is not marked any more.

    kind regards

Viewing 15 replies - 1 through 15 (of 21 total)
  • Plugin Author gioni

    (@gioni)

    Hi!

    Could you reproduce this issue on all your websites?
    Please make a screenshot of the Activity page and submit it here: https://wpcerber.com/support/

    Thread Starter nimrod54

    (@nimrod54)

    Hi,

    yes I see the same issues on all three websites. The issues appear since I updated Cerber to 6.0 this morning. Until the update I had no issues. I check the Cerber dashboard every morning. No other plugin has been updated.

    I uploaded the screenshots for alle three websites to your support website.

    Plugin Author gioni

    (@gioni)

    What about IPs from the White Access lists? Are they marked green?

    Thread Starter nimrod54

    (@nimrod54)

    Hi,

    I have some IPs on the white list, and they are marked green. But I need to do some more testing, because I just have single IP addresses on my white list, not ip ranges.

    I see IP adresses marked in black if this single IP is on the blacklist. When the IP range is on the blacklist, in a lot of cases single IP addresses in that range are not always marked in black (see my screenshots uploaded yesterday).

    I need to check if a single IP address is marked green if the range is on the whitelist. I will let you know later today

    best regards

    Thread Starter nimrod54

    (@nimrod54)

    Hi ,

    I did some testing with IPs on the white list. They are marked in green in both cases – just putting the single IP address on the whitelist and also in case I put alternativly the IP range on the white list.

    best regards

    Thread Starter nimrod54

    (@nimrod54)

    Hi,

    I checked the whitelist again this morning and unfortunately it’s not working either. As said above, yesterday I put an IP on my whitelist and it was marked green. I use Gravityscan service to check my websites frequently for vulnerable code and I put their IP on the whitelist. This morning I noticed their scanner has been blocked and their IP address is not marked green.

    I upload the screenshots using the link you provided above.

    Best regards

    Plugin Author gioni

    (@gioni)

    Please click on any IP address from the Gravityscan range (that you’ve whitelisted) on the Activity page and check the information area above the table. Does it show that the IP is in the White List?

    Thread Starter nimrod54

    (@nimrod54)

    I checked this, and the answer is: NO. Interesting enough the IP was marked green when I put the address range on the whitelist yesterday. The only thing that happened since I whitelisted the adress range, was that Gravityscan tried to check my website.
    I put now the single IP on the whitelist also. The IP is marked green now. It will be interesting to see if it is still marked green after Gravityscan checked my websites.

    Thread Starter nimrod54

    (@nimrod54)

    Hi,
    I did some more checking. When Gravityscan ckecks my website, the Gravityscan IP address in the activity tab shows “Probing for vulnerable PHP code” and “locked out”. I put the Graviyscan IP address on white list, then on black list (deleted from white list before) and left out of both lists. It makes absolutely no difference, the entries in the activity list are identical.

    Plugin Author gioni

    (@gioni)

    Hi!

    1. Did you enter a single IP address?
    2. Can you inspect the server error file for relevant errors?
    3. Can you check the cerber_acl table in phpMyAdmin or similar DB management software?

    Plugin Author gioni

    (@gioni)

    Probably a bug is the cause. I’m investigating that.

    Thread Starter nimrod54

    (@nimrod54)

    Hi,

    1. I did enter both, the single IP and the IP range. As said, whitelisted, blacklisted, left off lists. No difference.
    2. My WP site is hosted on a shared server. Don’t know if I can get the info.
    3. Cerber_acl table looks ok (I Have to say I’m not an IT specialist) I can upload a screenshot

    Plugin Author gioni

    (@gioni)

    Please make sure that the cerber_acl table doesn’t contain zeros in ip_long_begin or in ip_long_end columns.

    Thread Starter nimrod54

    (@nimrod54)

    Cerber_acl contains more zeros in ip_long_begin and in ip_long_end columns than values >0

    Plugin Author gioni

    (@gioni)

    That is not good. To fix it please export the Access Lists to a file and import them. It will restore the table data.

Viewing 15 replies - 1 through 15 (of 21 total)
  • The topic ‘IP and blacklist’ is closed to new replies.