Title: virtual host confusion
Last modified: March 24, 2018

---

# virtual host confusion

 *  [luhmann](https://wordpress.org/support/users/luhmann/)
 * (@luhmann)
 * [8 years ago](https://wordpress.org/support/topic/virtual-host-confusion/)
 * I’m getting errors of the following kind in my server’s HTTPS error logs:
 * “Hostname XXXXXXXX:443 provided via SNI and hostname XXX.tld provided via HTTP
   are different”
 * Googling around suggests that this is might be an attempted “virtual host confusion”
   attack. Or did I just misconfigure my server when I set up HTTPS? How to tell.
   And if it is an attack, can I configure Wordfence to block it? (It is causing
   my server to go down a few times a day…)
 * [https://security.stackexchange.com/questions/134021/what-kind-of-attack-is-prevented-by-apache2s-error-code-ah02032-hostname-prov](https://security.stackexchange.com/questions/134021/what-kind-of-attack-is-prevented-by-apache2s-error-code-ah02032-hostname-prov)

Viewing 1 replies (of 1 total)

 *  [wfalaa](https://wordpress.org/support/users/wfalaa/)
 * (@wfalaa)
 * [7 years, 11 months ago](https://wordpress.org/support/topic/virtual-host-confusion/#post-10254406)
 * Hi [@luhmann](https://wordpress.org/support/users/luhmann/)
 * Sorry for being late to reply on that thread, this sounds like something related
   to server SSL configuration, as the bug was [disclosed](https://hackerone.com/reports/501)
   4 years ago, and this patch was [released](https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1298273)
   around the same time I think. I’m pretty sure your server has the latest updated
   OS version, right? Perhaps it’s time dig into server SSL setup or seek help from
   a server admin.
 * Thanks.

Viewing 1 replies (of 1 total)

The topic ‘virtual host confusion’ is closed to new replies.

 * ![](https://ps.w.org/wordfence/assets/icon.svg?rev=2070865)
 * [Wordfence Security - Firewall, Malware Scan, and Login Security](https://wordpress.org/plugins/wordfence/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wordfence/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wordfence/)
 * [Active Topics](https://wordpress.org/support/plugin/wordfence/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wordfence/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wordfence/reviews/)

## Tags

 * [attack](https://wordpress.org/support/topic-tag/attack/)
 * [HTTPS](https://wordpress.org/support/topic-tag/https/)
 * [sni](https://wordpress.org/support/topic-tag/sni/)

 * 1 reply
 * 2 participants
 * Last reply from: [wfalaa](https://wordpress.org/support/users/wfalaa/)
 * Last activity: [7 years, 11 months ago](https://wordpress.org/support/topic/virtual-host-confusion/#post-10254406)
 * Status: not resolved