WordPress issues false positive and error when editing rules
Forum
  1. Forums
  2. General
  3. General Discussion
  1. ibrahim
  2. 24.03.2020
  3.  Subscribe via email
Hi There,

I'm getting a lot of false-positive alerts from WordPress.



POST /xmlrpc.php
33303: Wordpress Bruteforce RBL block||T:APACHE||MV:09-26.101.50.1.17



POST /wp/cc/xy/wp-admin/post.php

33314: RTrack: G: P:user_ID=1&action=editpost&originalaction=editpost&post_author=1&post_type=page&original_post_status=publish&referredby=&_wp_original_http...=&post_ID=3415..........& F:||T:APACHE||PC:270473||R:302




also when I click on one of there rules I get this error

Error: API failure: (XID ukd754) The vendor “imunify360” is not set up.



Is there is a way to exclude WordPress
Rate this post:
  1. 24.03.2020 09:03:38
  2. # 1
Sergey Khristich Accepted Answer
Posts: 348
Joined: 20.05.2019
0
Votes
Undo
Hello Ibrahim,
Thank you for reaching out! To help you with this question we need a little bit more information, please create a ticket here https://cloudlinux.zendesk.com/hc/en-us/requests/new and technical experts will help you asap.
If you have any other questions, feel free to ask here.
Thank you for contacting us.
Marketing Manager
  1. 24.03.2020 09:03:17
  2. # 2
ibrahim Accepted Answer
Posts: 4
Joined: 24.03.2020
0
Votes
Undo
More info like what?
  1. 24.03.2020 10:03:34
  2. # 3
Greg Accepted Answer
Posts: 0
Joined: 31.05.2020
0
Votes
Undo
Hi Ibrahim,
why do you consider it as false-positive?
  1. 24.03.2020 10:03:33
  2. # 4
ibrahim Accepted Answer
Posts: 4
Joined: 24.03.2020
0
Votes
Undo
Cause I'm the one whos editing the post
  1. 24.03.2020 10:03:01
  2. # 5
Sergey Khristich Accepted Answer
Posts: 348
Joined: 20.05.2019
0
Votes
Undo
More info like what?

Ibrahim,
We will check your logs in order to understand why there is a lot of FP.
Marketing Manager
  1. 24.03.2020 10:03:27
  2. # 6
ibrahim Accepted Answer
Posts: 4
Joined: 24.03.2020
0
Votes
Undo
tell me what logs you want...
  1. 24.03.2020 10:03:25
  2. # 7
Sergey Khristich Accepted Answer
Posts: 348
Joined: 20.05.2019
0
Votes
Undo
tell me what logs you want...

We need the information "imunify360-agent doctor" and the IP from which requests are made. Since rule 33303 is associated with RBL, that is, we need to understand why RBL is blocking. Can you open a support ticket https://cloudlinux.zendesk.com/hc/en-us/requests/new so we can take a closer look at your system? You can post the ticket number here and we'll link this thread to it.
Thank you.
Marketing Manager
  1. 24.03.2020 11:03:44
  2. # 8
ibrahim Accepted Answer
Posts: 4
Joined: 24.03.2020
0
Votes
Undo
Thanks

NO.83060

Regards
I B R A H I M
  1. 24.03.2020 16:03:17
  2. # 9
Sergey Khristich Accepted Answer
Posts: 348
Joined: 20.05.2019
0
Votes
Undo
Thanks

NO.83060

Regards
I B R A H I M


Thank you, our specialists will answer you on the ticket as quickly as possible.
Marketing Manager
  1. 22.05.2020 13:05:41
  2. # 10
ReeceBradley Accepted Answer
Posts: 0
Joined: 31.05.2020
0
Votes
Undo
Thanks for the help
  • Page :
  • 1


There are no replies made for this post yet.
Be one of the first to reply to this post!
Guest
Submit Your Response
Upload files or images for this discussion by clicking on the upload button below. Supports gif,jpg,png,zip,rar,pdf
• Insert • Remove Upload Files (Maximum File Size: 2 MB)
Captcha
To protect the site from bots and unauthorized scripts, we require that you enter the captcha codes below before posting your question.