Блокировка Wordfence, но не иммунизация360
Форум
  1. Forums
  2. Imunify360
  3. Imunify360 and Imunify Sensor
  1. Chris
  2. Saturday, 17 February 2018
  3.  Subscribe via email
On one of my client sites, wordfence have been reported manay attacks by one particular ip.
It is reporting the below message or similar for the same ip several days:

The Wordfence Web Application Firewall has blocked 248 attacks over the last 10 minutes. Below is a sample of these recent attacks: February 17, 2018 5:28pm 46.4.0.246 (Germany) Blocked because the IP is blacklisted February 17, 2018 5:28pm

So this ip is blacklisted by wordfence centrally detected by wordfence trying to access one of my client sites and blocked by wordfence.


It doesn’t appear to be detected by immunify360 as that io does not appear in the incident log, and does not appear in the grey list.

I have added it to the blacklist in immunify360 as a precaution.


Why is wordfence detecting and blocking a malicious ip when immunify360 is not?

Surely immunify360 shoulda at server level detect the io before wordfence. Or is it because wordfence blocks the io from attempting anything suspicious to trigger immunify in the first place?

Surely though if an ip is sufficiently dodgy for wordfence to blacklist it it would be picked up across immunify360 from other servers with immunify369 and herd protection aplied?

So I guess this is leading me to wonder if specifically WordPress is monitored and protected for bad actors by immunify360?

Kind Regards,

Chris
Rate this post:
  1. 19.02.2018 15:02:08
  2. # 1
Posts: 187
Joined: 31.01.2017
0
Votes
Undo
Chris,

Could you provide us with access log and ModSecurity log samples for WP site being attacked and the IP mentioned 46.4.0.246? Please feel free to submit a ticket with our helpdesk system at https://cloudlinux.zendesk.com, so Imunify360 team can find out why Imunify360 did not block it in your case.

Thanks
  • Page :
  • 1


There are no replies made for this post yet.
Be one of the first to reply to this post!
гость
Submit Your Response
Upload files or images for this discussion by clicking on the upload button below. Supports gif,jpg,png,zip,rar,pdf
• Insert • Remove Upload Files (Maximum File Size: 2 MB)
Captcha
To protect the site from bots and unauthorized scripts, we require that you enter the captcha codes below before posting your question.