• Resolved lorebear

    (@lorebear)


    After combing your support files here, I have reached a dead end.

    My blog has suffered horrible brute force attacks. These attacks, despite installation of numerous plugins proved to be unsuccessful (even Jetpack was unable to protect my site) These attacks caused overloading memory & bandwidth and slowing the site to a crawl. A recent attack, forced my web host to lock down the site. A full rebuild of the site was the only option left.

    During this rebuild process the attempt to load the Jetpack plugin resulted in the following error:

    site_inaccessible [HTTP 404]

    Through research in your support and troubleshooting pages, I discovered that I needed to contact my web host to see if they would unlock the xmlrpc.php file so that Jetpack could access it. Because of the brute force attack, they will allow access but only directly to the Jetpack IP address. Is it possible to get the IP address Jetpack is using to try and access the file on my site so that I can get the plugin installed?

    (*The attacks to my site were against many files, xmlrpc.php was one of them.)

    Please help!

    https://wordpress.org/plugins/jetpack/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Contributor csonnek

    (@csonnek)

    Happiness Rocketeer 🚀

    Can you let me know what site you’re having this problem? Once I have that information, I’ll be better able to help.

    If you want it to remain private, you can also contact us via this contact form:
    http://jetpack.me/contact-support/

    Thanks!

    Thread Starter lorebear

    (@lorebear)

    Thank you csonnek for getting back to me. I’ve been to http://jetpack.me/contact-support/ but the contact options are limited as the page states that the tech support will be unavailable until Oct 21.

    I have no problem sharing the url with you as it is a public site:

    http://www.westofmilton.com

    Once again, I do know that the xmlrpc.php file has been locked down by my host, as stated this has been done to protect from the brute force attacks than forced a rebuild of the site.

    Plugin Contributor csonnek

    (@csonnek)

    Happiness Rocketeer 🚀

    I’m sorry about that! Such a force of habit to have people contact us that way if they don’t want to share their URL – I had forgotten we closed the form. 🙁

    Unfortunately, blocking XML-RPC is not a great solution for fighting security risks. It’s akin to selling your car because you don’t want it to be stolen.

    Your site’s XML-RPC file is kind of like a communication gateway to your site. Jetpack, the WordPress Mobile Apps, and other plugins and services will use this file to communicate to your site. If this is blocked, you will have other issues pop-up down the road for the same reasons.

    I would suggest contacting your hosting provider and asking them to unblock your site’s XML-RPC. The most popular hosting providers out there have managed to find other ways to protect their servers without having to hinder your site and your ability to use services with your WordPress site.

    If they refuse to make any changes, and if you want to use apps and plugins like Jetpack, I’d suggest looking for a new host. Here are a few hosts we recommend: http://get.wp.com/hosting/

    Jetpack’s Protect module does protect you from some of these brute force attacks. You can read more about this here:
    http://wptavern.com/jetpack-protect-blocks-brute-force-amplification-attacks

    I hope that clarifies things!

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘HTTP 404 site inaccessible error’ is closed to new replies.