A question can only have one accepted answer. Are you sure you want to replace the current answer with this one?
You previously marked this answer as accepted. Are you sure you want to unaccept it?
Hi guys
I have a wordpress site built and installed wordfence plugin. I am able to reach my website from any device but on the wordfence dashboard it shows me
| IP | Block Count |
|---|---|
| 104.236.55.169 | 84 <<<<< This is my server (droplet ip) |
| 185.13.112.126 | 7 |
| 95.84.161.27 | 7 |
Why my server IP shows up on wordfence dashboard as blocked?
Hello,
I would recommend following the steps from the answer in this post here:
https://wordpress.org/support/topic/wordfence-shows-my-server-ip-as-blocked/
Regards,
Bobby
I use ufw and fail2ban, and I've come across some behavior I don't understand, and this leads me to think that something's not configured correctly. I noticed a ton of POSTs from two IP addresses over and over again that I cannot identify. What's weird, though, is even if I add them to ufw, they still show in other_vhosts_access.log. These addresses and attempts do not show in access.log, however. Just to be clear, I added them using "insert" so that the deny statements are above the allow statements for ports 80 and 443. I even tried resetting the rules and starting over.
Howdy-- I've taken some steps, updated some plugins, etc. to help prevent the XML-RPH attack. I know there's more I can do. Really my question is more concerning the IP Range that it is coming from. All from the US, and all from the 192.0 subnet which is even more odd. Is there something this indicates on my end? Have I been hacked? Thanks! This if from the Apache access log: 192.0.102.45 - - [24/Sep/2017:07:47:16 +0000] "POST /xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239236&nonce=prJ39QyYNZ&body-hash=tAMmIbgk9hZf%2BB32y6n62MhaCvc%3D&signature=izVAPyMS6o3nwv%2BHAzlGKv5lOQ0%3D HTTP/1.1" 200 3948 "https://xxxxxxx.com/xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239236&nonce=prJ39QyYNZ&body-hash=tAMmIbgk9hZf%2BB32y6n62MhaCvc%3D&signature=izVAPyMS6o3nwv%2BHAzlGKv5lOQ0%3D" "Jetpack by WordPress.com" 192.0.102.39 - - [24/Sep/2017:07:47:16 +0000] "POST /xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239236&nonce=ZezTPlmQZn&body-hash=hntkJlfD8VQSSlEJAuk0PtruOWA%3D&signature=nZbtDWoNI7HR0tvgfhk9BCiiF0Y%3D HTTP/1.1" 200 3952 "https://xxxxxxxxxxxxx.com/xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239236&nonce=ZezTPlmQZn&body-hash=hntkJlfD8VQSSlEJAuk0PtruOWA%3D&signature=nZbtDWoNI7HR0tvgfhk9BCiiF0Y%3D" "Jetpack by WordPress.com" 192.0.101.101 - - [24/Sep/2017:07:47:17 +0000] "POST /xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239237&nonce=C1Xq4sp289&body-hash=igba%2BoMXu48iiAfQxRZDcW62voA%3D&signature=RfzC84DPvSlKIiIE3L8BaNX1j8I%3D HTTP/1.1" 200 3949 "https://xxxxxxxxxx.com/xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239237&nonce=C1Xq4sp289&body-hash=igba%2BoMXu48iiAfQxRZDcW62voA%3D&signature=RfzC84DPvSlKIiIE3L8BaNX1j8I%3D" "Jetpack by WordPress.com" 192.0.99.28 - - [24/Sep/2017:07:47:18 +0000] "POST /xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239237&nonce=WxPnqGwr8b&body-hash=iuV6PLHvgfPvDxcYoZFmJ6pNZEM%3D&signature=NXq6%2F1n3wRJkRqj065IJapYRfaw%3D HTTP/1.1" 200 3950 "https://xxxxxxxxxxxxxxxx.com/xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239237&nonce=WxPnqGwr8b&body-hash=iuV6PLHvgfPvDxcYoZFmJ6pNZEM%3D&signature=NXq6%2F1n3wRJkRqj065IJapYRfaw%3D" "Jetpack by WordPress.com" 192.0.100.17 - - [24/Sep/2017:07:47:18 +0000] "POST /xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239238&nonce=rQUzZUPd3d&body-hash=g1S%2FQ%2FSlynI25ho%2FRnbxhMKzcis%3D&signature=6n4HIb1DbWz6pr6rkQ40yRKAmzE%3D HTTP/1.1" 200 3953 "https://xxxxxxxxxxxxxx.com/xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239238&nonce=rQUzZUPd3d&body-hash=g1S%2FQ%2FSlynI25ho%2FRnbxhMKzcis%3D&signature=6n4HIb1DbWz6pr6rkQ40yRKAmzE%3D" "Jetpack by WordPress.com" 192.0.101.162 - - [24/Sep/2017:07:47:18 +0000] "POST /xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239238&nonce=1lWp7gFKWg&body-hash=ZFJt2PVkMt4D87tETUINY7DuPXI%3D&signature=IXotHggGZyt7UQUf%2BeSORvGLxcM%3D HTTP/1.1" 200 3952 "https://xxxxxxxxxxxxxxx.com/xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239238&nonce=1lWp7gFKWg&body-hash=ZFJt2PVkMt4D87tETUINY7DuPXI%3D&signature=IXotHggGZyt7UQUf%2BeSORvGLxcM%3D" "Jetpack by WordPress.com" 192.0.101.53 - - [24/Sep/2017:07:47:19 +0000] "POST /xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239239&nonce=Zb2yzR6fhL&body-hash=qYl06LhXEMp1BpvdF6rWs36gdJ0%3D&signature=lxDhf5enEy00r9V4tNzXdBr7V0A%3D HTTP/1.1" 200 3953 "https://xxxxxxxxxxxxx.com/xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239239&nonce=Zb2yzR6fhL&body-hash=qYl06LhXEMp1BpvdF6rWs36gdJ0%3D&signature=lxDhf5enEy00r9V4tNzXdBr7V0A%3D" "Jetpack by WordPress.com" 192.0.100.197 - - [24/Sep/2017:07:47:19 +0000] "POST /xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239239&nonce=IBAaMZJ6uB&body-hash=ECW3agCmjEoMwfpJUngcpHmZxzg%3D&signature=FnupFVnPADRaMJujEsb6qkWHjhk%3D HTTP/1.1" 200 3952 "https://xxxxxxxxxxxxx.com/xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239239&nonce=IBAaMZJ6uB&body-hash=ECW3agCmjEoMwfpJUngcpHmZxzg%3D&signature=FnupFVnPADRaMJujEsb6qkWHjhk%3D" "Jetpack by WordPress.com" 192.0.102.47 - - [24/Sep/2017:07:47:19 +0000] "POST /xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239239&nonce=JAlKmhIcYh&body-hash=ZRE5p8Ej2QLMekiko5WrFVLxIhQ%3D&signature=gJMs%2Bnph4LLa0bUIxEyZPXivNCA%3D HTTP/1.1" 200 4700 "https://xxxxxxxxxxxx.com/xmlrpc.php?for=jetpack&token=3OU%40vqC%29qRUdnxjqTB4u3rQDu7aaGBr%24%3A1%3A1×tamp=1506239239&nonce=JAlKmhIcYh&body-hash=ZRE5p8Ej2QLMekiko5WrFVLxIhQ%3D&signature=gJMs%2Bnph4LLa0bUIxEyZPXivNCA%3D" "Jetpack by WordPress.com"
I have a rather complicated issue (for me at least with my little knowledge) which has been holding me back from doing this. I have an already established site with almost 1000 posts with decent traffic. I set up everything through ServerPilot. I also used CloudFlare and have their Flexible SSL on as well. How do I go about transferring to https? What are the steps involved to minimize any traffic loss and downtime? I would appreciate any help?
I'm about to host a new WordPress blog having a majority of traffic from Australia and USA, can you guys please suggest me Which data center location will be the best to host a website having a majority of traffic from Australia and USA?