• Resolved jefferisp7

    (@jefferisp7)


    I am getting a lot of lockouts from localhost addresses. This site was created with a staging site and on the host, I believe they have set up automatic redirection. However, I spoke with tech support and they see for example that some of these requests were from CRON and are legitimate. I didn’t have them look up all requests, but plugin updates, Jetpack, Backup, etc. make valid requests. They don’t think that any faked IP addresses are being used. My questions are: can I safely unblock or whitelist these 2 localhosts?
    and when Cerber locks them out, is it preventing the aforementioned Cron and plugins, from working properly?

    127.0.0.1 localhost March 16, 2019, 8:21 am Multiple suspicious activities were detected Remove
    ::1 localhost March 16, 2019, 8:16 am Multiple suspicious activities were detected Remove

     	127.0.0.1
    localhost	March 15, 2019, 8:37 am	
    XML-RPC request denied IP address is locked out
    URL: stagingsite.pairsite.com/<strong>xmlrpc.php</strong>
    127.0.0.1 localhost	Firefox on Linux	
    March 15, 2019, 8:34 am	https://stagingsite.pairsite.com/wp-login.php
    POST HTTP 404 Not Found 452 ms
    Attempt to access prohibited URL IP address is locked out
    ::1 localhost	Firefox on Linux	
    March 15, 2019, 8:34 am	https://stagingsite.pairsite.com/wp-login.php
    GET HTTP 404 Not Found 438 ms
    Attempt to access prohibited URL IP address is locked out

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter jefferisp7

    (@jefferisp7)

    Also, can hackers fake the localhost IP addresses?

    Plugin Author gioni

    (@gioni)

    I think this is your case: https://wpcerber.com/wordpress-ip-address-detection/

    Hackers cannot fake localhost address if it’s normal, which is 127.0.0.1 in case of IPv4.

    Thread Starter jefferisp7

    (@jefferisp7)

    Hi, I pushed my site from http to SSL/ https and I had to completely delete Cerber via FTP in order to be able to log in. It made it impossible for me to even get to the wp-login.php page even though my IP address was whitelisted.

    Any recommendations?

    Plugin Author gioni

    (@gioni)

    To understand what’s going on you have to check the Activity log. Make sure that IP addresses are detected correctly.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘localhost cron lockouts’ is closed to new replies.