IniLerm
Forum Replies Created
-
Forum: Plugins
In reply to: [Advanced IP Blocker] How do I add 200 IPs to the whitelist?Hi @theboina,
That is a brilliant workaround! Using the Import/Export feature to inject a custom JSON list is a very creative and valid solution. I am impressed.
You are absolutely right about ASNs—not every provider has a clean one, so having a way to bulk import IPs is essential. We will still work on a dedicated UI for bulk pasting to make it easier for everyone, but your method is perfect for power users in the meantime.
Thanks for sharing this tip! It might help others reading this thread.
Best regards,
IniLerm
Forum: Reviews
In reply to: [Advanced IP Blocker] Good integration with the webHi @theboina,
Thank you so much for the 5-star review!
I am really glad to hear that you found the plugin both comprehensive and easy to customize for your specific needs. Ensuring seamless integration with other tools (like the ones we discussed) is a top priority for us, so your feedback confirms we are hitting the mark.
Thanks for your support!
Forum: Plugins
In reply to: [Advanced IP Blocker] whitelisted but still blockedHi @tedraortega,
This is excellent detective work. The fact that “Pausing Cloudflare” fixes it confirms 100% that it is an IP Detection issue.
Even though the System Status says “Green”, the plugin is likely failing to extract your real IP address from the Cloudflare headers in your specific server environment, so it sees Cloudflare’s IP as “Your IP”.
The Test:
- Enable Cloudflare again.
- Log in (since you said you stay logged in).
- Go to Security > Dashboard > System Status.
- Look at “Your Detected IP Address”.
- Does it show your real home IP (check whatsmyip.com)?
- Or does it show a Cloudflare IP (usually starts with 162., 172., 104.)?
The Solution:
If it shows a Cloudflare IP, it means the “Trusted Proxy” setting (AS13335) isn’t enough for your server configuration.
Please try adding the Cloudflare IP Ranges explicitly to the “Trusted Proxies” list (Settings > IP Detection). Sometimes servers don’t resolve the ASN correctly.You can find the list here: https://www.cloudflare.com/ips/ (Copy/paste the IPv4 list into the Trusted Proxies box).
Also, please double-check that “Whitelist Login Access” is definitely UNCHECKED. That setting is incompatible with dynamic setups like this.
Forum: Plugins
In reply to: [Advanced IP Blocker] How do I add 200 IPs to the whitelist?Bonus Method (For Advanced Users with SSH/WP-CLI):
If you have SSH access and WP-CLI installed, you can import thousands of IPs in seconds using a simple one-liner.
Since you mentioned ManageWP, here is the exact command to fetch their official IP list and whitelist them all automatically:
You must run the command in the WordPress directory.
curl -s https://s42013.pcdn.co/wp-content/uploads/2021/03/managewp-ips.txt | xargs -I {} wp advaipbl whitelist add {} --detail="ManageWP"(Note: This works because our plugin has full WP-CLI support. The input file must have one IP per line).
Forum: Plugins
In reply to: [Advanced IP Blocker] How do I add 200 IPs to the whitelist?Hi @theboina,
That is a great question. Adding 200 IPs manually is definitely not efficient!
We are planning to add a “Bulk Import” feature (CSV/Text area) in a future version (v8.9+), but right now, you have two much faster and smarter ways to handle this:
1. Use ASN Whitelisting (Recommended)
Instead of whitelisting 200 individual IPs, you can often whitelist the entire network provider of the service.- Go to Security > Blocking Rules > ASN Blocking.
- In the “ASN Whitelist” box, add the ASN of the service.
- Example: If StatusCake uses a specific ASN (you can check one of their IPs on bgp.he.net), adding that single line allows all their current and future IPs instantly.
2. Use CIDR Ranges
Services like ManageWP often publish their IPs in “CIDR format” (e.g., 192.168.0.0/24).- Our “Add to Whitelist” input supports CIDR ranges.
- Instead of adding 256 individual IPs, you just add 192.168.0.0/24 once, and it covers the whole block.
Pro Tip: Check the support documentation of StatusCake/ManageWP. They usually provide a list of CIDR ranges or their ASN to make firewall configuration easier.
We will work on the bulk paste feature for the next release to make this even easier!
Best regards,
Advanced Ip Blocker Team
Forum: Plugins
In reply to: [Advanced IP Blocker] whitelisted but still blockedHi @tedraortega,
Thank you for the update. Since disabling that setting didn’t fix it, we need to dig a little deeper to find out exactly who is blocking you and why.
I noticed your site is behind Cloudflare. This is the most likely cause of the issue.
The Diagnosis:
If you haven’t configured the plugin to “trust” Cloudflare, the plugin sees Cloudflare’s IP address instead of your real home IP. So even if you whitelist your home IP, the plugin thinks you are someone else and blocks you.Action Plan (Please try this in order):
- Configure IP Detection (Crucial for Cloudflare users):
- Go to Security > Settings > IP Detection.
- In the “Trusted Proxies” box, add this line (the Cloudflare identifier):
AS13335 - Click Save.
- Check: Go to Dashboard > System Status. Does “Connection via Proxy” now show a green “Cloudflare”? If yes, the problem should be solved.
- Tell us what you see:
If you still get blocked, what exactly happens?- Do you see a white screen with “Access Denied”?
- Do you see a Cloudflare “Attention Required” page?
- Does the login page just reload?
Knowing the exact error message will help us pinpoint if the block is coming from our plugin or from a Cloudflare rule.
Best regards,
Advanced IP Blocker Team
Forum: Plugins
In reply to: [Advanced IP Blocker] SSL “critical” with automatic DeepScanIf you have a moment, we would really appreciate a 5-star review to help other users find the plugin.
Thanks again, and enjoy using your site securely!
Forum: Plugins
In reply to: [Advanced IP Blocker] SSL “critical” with automatic DeepScanHi @wassi007,
Just checking in—did the new settings in v8.8.2 solve the email alert issue for you? If so, please mark this ticket as Resolved. Thanks!
Forum: Plugins
In reply to: [Advanced IP Blocker] SSL “critical” with automatic DeepScanHi @wassi007,
Great news! We have just released version 8.8.2 with the feature you requested.
You now have granular control over the Site Scanner.
How to solve your SSL alert issue:
- Update to v8.8.2.
- Go to Security > Settings > Notifications.
- Scroll down to the new “Site Scanner Settings” section.
- Uncheck “Check SSL Certificate”.
- Save changes.
The Result:
- The SSL check will now show as “Skipped” in manual scans (Grey status).
- It will be completely ignored during automated background scans.
- Since the “Critical” error is gone, you will stop receiving the daily alert emails (unless a new, real issue is found).
Note on your Plesk environment:
Since you are the only user reporting this persistent false positive, it strongly suggests a specific configuration in your Plesk loopback interface where WordPress cannot verify its own SSL certificate internally. By disabling this specific check, you align the plugin with your server’s reality without losing the other security benefits.I hope this provides the perfect balance for your 30+ sites!
Best regards,
Advanced IP Blocker Team
Forum: Plugins
In reply to: [Advanced IP Blocker] whitelisted but still blockedHi @tedraortega,
I am sorry to hear you are getting locked out. This usually happens when the “Whitelist Login Access” setting is enabled, which is extremely strict.
Here is the solution to fix it permanently:
1. The Most Likely Culprit
Go to Security > Settings > Login & User Protection.
Find the option: “Whitelist Login Access” (Restrict access to wp-login.php).
Uncheck it (Disable it).- Why? This option blocks everyone from even seeing the login page unless their IP is manually added to the whitelist. If you are on a mobile device, using a VPN, or if your ISP rotates IPs slightly, you will be locked out immediately.
2. Check for “Hidden” IP Changes (Apple Users)
If you use an iPhone, iPad, or Mac with Safari, you might have “iCloud Private Relay” active. This feature hides your real IP and presents a different Apple IP to the website every time you connect.- Even if you think your IP is static, Private Relay changes it.
- Disabling the “Whitelist Login Access” setting (Step 1) is the best fix for this.
3. Recommended Alternative
Instead of restricting access by IP, enable “Auto-Whitelist Admins” in the same settings tab. This is much smarter: it automatically adds your current IP to the whitelist after you successfully log in, preventing you from being blocked by other rules (like rate limiting) without locking you out of the login page itself.Let me know if disabling that specific setting solves it!
Best regards,
Advanced Ip Blocker Team
Forum: Plugins
In reply to: [Advanced IP Blocker] SSL “critical” with automatic DeepScanHi @wassi007,
I’m marking this thread as resolved. Feel free to open a new topic if you have further questions.
Thanks.
Hi @zerocan ,
I’m marking this thread as resolved. Feel free to open a new topic if you have further questions.
Thanks.
Forum: Reviews
In reply to: [Advanced IP Blocker] Extreem good plugin… HappyHi @optimaliseer,
Thank you for the wonderful 5-star review!
It is amazing to see the immediate impact: blocking 132 malicious IPs in just 12 hours is a huge load taken off your server. Those “silent” crawlers and bots are often the hidden cause of performance issues, and I am glad the plugin could identify and stop them so quickly for you.
Thanks for recommending us!
Forum: Reviews
In reply to: [Advanced IP Blocker] Excellent security plugin with great supportHi @thewatchman3,
Thank you so much for this amazing review! It was a pleasure working with you to solve the MarsEdit connection issue.
Your detailed feedback was crucial in helping us release the compatibility patch so quickly. I also want to give a shout-out to the MarsEdit team, who kindly provided us with a developer license to help us test and ensure our plugins work seamlessly together in the future.
Thanks for making Advanced IP Blocker your go-to choice!
Forum: Plugins
In reply to: [Advanced IP Blocker] XMLRPC.php Still Being BlockedHi @thewatchman3,
That is wonderful news! I am really glad we could get it working perfectly for you. Thank you for your patience and for helping us debug this edge case—it has made the plugin better for everyone.
If you have a moment, we would really appreciate a 5-star review to help other users find the plugin.
👉 Rate Advanced IP Blocker here
Thanks again, and enjoy using MarsEdit securely!