Forum
  1. Forums
  2. Imunify360
  3. Imunify360 and Imunify Sensor
  1. Ray Baron
  2. Tuesday, May 02, 2017
  3.  Subscribe via email
Great product! Saves me tons of work no longer having to build my own list of miscreant IPs.

One problem:

IPs in the CSF deny list are not blocked when Imunify360 is enabled.

This IP is a WP login attack bot. Found tons of these entries on the Imunify Incidents page:

2 minutes ago United States 198.xxx.xxx.xxx 3 retries WordPress login attempt www.<domain>.com

On the Imunify Blacklist page:

Black list management is disabled due to CSF integration mode.
Please use csf to manage black list.

So ...

csf -d 198.xxx.xxx.xxx
deny failed: 198.xxx.xxx.xxx is in already in the deny file /etc/csf/csf.deny 1 times


Yup, its there ...

# ipset --list chain_DENY | grep 198.*
198.xxx.xxx.xxx


Still getting this in the Imunify Incident log and in the website log file.

access-logs/<domain>.com:198.xxx.xxx.xxx - - [02/May/2017:14:52:22 -0400] "POST /wp-login.php HTTP/1.1" 200 1682 "-" "Mozilla/5.0
Rate this post:
  1. 03.05.2017 09:05:17
  2. # 1
Rushan Shaymardanov Accepted Answer
Posts: 0
Joined: 26.06.2017
0
Votes
Undo
Hello. Thank you for report

Can you please submit this issue using our helpdesk system https://helpdesk.cloudlinux.com/ so that we can investigate it.

Please, provide our support team with output of `imunify360-agent doctor` command.
  1. 03.05.2017 12:05:46
  2. # 2
Dieter Accepted Answer
Posts: 0
Joined: 26.06.2017
0
Votes
Undo
I just enabled my Imunify360, and I just noticed the same problem, my csf.deny stays empty with Imunify360 enabled.
  1. 03.05.2017 12:05:37
  2. # 3
Rushan Shaymardanov Accepted Answer
Posts: 0
Joined: 26.06.2017
0
Votes
Undo
I just enabled my Imunify360, and I just noticed the same problem, my csf.deny stays empty with Imunify360 enabled.


This is a normal behavior. In CSF integration mode, all ip addresses blocked by lfd are going to Imunify360 graylist.
  • Page :
  • 1


There are no replies made for this post yet.
Be one of the first to reply to this post!
Guest
Submit Your Response
Upload files or images for this discussion by clicking on the upload button below. Supports gif,jpg,png,zip,rar,pdf
• Remove Upload Files (Maximum File Size: 2 MB)
You may insert polls into your post. The poll would then appear in the post.
Vote Options
Captcha
To protect the site from bots and unauthorized scripts, we require that you enter the captcha codes below before posting your question.