site lockout for whitelisted IP?

  • Resolved cconstantine

    (@cconstantine)


    7 years, 1 month ago

    My site has a caching process that (for whatever reason) generates a significant number of 404. iThemes keeps emailing me site lockout notifications for the IP address of the site itself 162.144.85.245…

    Craigs-Mac-mini:~ craig$ dig -x 162.144.85.245 +short
server.constantine.name.
Craigs-Mac-mini:~ craig$ dig constantine.name +short
162.144.85.245

    Meanwhile, I already have this IP address in iThemes’ “Global Settings” under “Lockout White List”.

    Meanwhile in logs, I’m seeing lots of “Whitelisted Host Triggered Host Lockout”…

    why?

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Thread Starter cconstantine

    (@cconstantine)

    this seems to have actually been an XML-RPC based attack. I was getting huge numbers of 

    121.78.145.53 - - [20/Feb/2018:08:06:43 -0700] "POST /xmlrpc.php HTTP/1.1" 200 54971 "-" "-"
121.78.145.53 - - [20/Feb/2018:08:06:46 -0700] "POST /xmlrpc.php HTTP/1.1" 200 54971 "-" "-"

    log entries. Configuring the XML-RPC security features in ithemes stopped it immediately.

    But make not sense that I received thousands of ithemes log entries, etc about my web site’s own IP address. I wasted days trying to figure this out…

Viewing 1 replies (of 1 total)
  • The topic ‘site lockout for whitelisted IP?’ is closed to new replies.