Forum Replies Created

Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter p4c

    (@p4c)

    Hi,

    I’ve found the issue. It was pretty easy to find it btw. Just updating Firefox to latest version resolve the issue for all website I’ve got.

    Thread Starter p4c

    (@p4c)

    Hi,

    I was interested by YOAST SEO Premium, but when i see that YOAST SEO price was for one website and could not be used on two installations (for a .fr & .com of the same website) but on two differents wordpress installation, it was not fair for me to grab it.

    I’ll keep using 16.5

    thanks

    Thread Starter p4c

    (@p4c)

    Hi Maybellyne,

    Thanks for your quick answer. I’m not using Imperva.

    I’m using EXTRA Theme from Elegant Theme & WP-Rocket and iThemes Security
    But even deactivate WP-Rocket / iThemes Security and using default theme, i’ve got the same problem.

    I don’t think it’s related to an issue on server side since i’ve got only one website where i use Extra Theme / WP-Rocket & iThemes Security and i don’t have this issue anymore and it’s hosting on the same servers (not a hosting server but a real one, so it’s really the same server)

    Thanks

    PS : The only thing different that I’ve found between all website that have this issue with same configuration is that on one side, YOAST SEO is in english and the others are in French. I’m not sure it could be related to this case. (since i’ve got a website in english with YOAST SEO in english that have this issue and a French website but with YOAST SEO in english and don’t get this issue)

    • This reply was modified 4 years, 5 months ago by p4c. Reason: more information
    Thread Starter p4c

    (@p4c)

    Hi,

    Thanks,

    Allow iThemes Security to write to wp-config.php and .htaccess : Activated
    Enable Blacklist Repeat Offender : Activated
    Log Type : Database Only (you suggest file, is it necessary ?)
    Enable ban users : Activated
    Enable local brute force protection : Activated
    Immediately ban a host that attempts to login using the “admin” username: Activated

    I’ve several line that show that banner users is working :

    # Ban Hosts – Security > Settings > Banned Users
    SetEnvIF REMOTE_ADDR “^5\.105\.195\.148$” DenyAccess
    SetEnvIF X-FORWARDED-FOR “^5\.105\.195\.148$” DenyAccess
    SetEnvIF X-CLUSTER-CLIENT-IP “^5\.105\.195\.148$” DenyAccess
    And

    <IfModule !mod_authz_core.c>
    Order allow,deny
    Allow from all
    Deny from env=DenyAccess
    Deny from 5.105.195.148
    Deny from 37.130.227.133
    Deny from 41.79.60.154
    Deny from 46.119.125.177
    ….

    on the error_log file, i don’t see any error, just :

    [Fri Apr 29 07:32:04.896837 2016] [authz_core:error] [pid 3735] [client 210.213.148.170:11540] AH01630: client denied by server configuration: /var/www/69desirs/xmlrpc.php
    [Fri Apr 29 07:36:46.041697 2016] [authz_core:error] [pid 3788] [client 182.56.248.139:21648] AH01630: client denied by server configuration: /var/www/69desirs/xmlrpc.php
    [Fri Apr 29 07:38:03.117955 2016] [authz_core:error] [pid 4084] [client 46.236.154.82:55890] AH01630: client denied by server configuration: /var/www/69desirs/xmlrpc.php
    [Fri Apr 29 08:22:10.974403 2016] [authz_core:error] [pid 6370] [client 155.133.82.108:43837] AH01630: client denied by server configuration: /var/www/69desirs/xmlrpc.php
    [Fri Apr 29 08:33:16.641543 2016] [authz_core:error] [pid 7461] [client 78.48.39.184:54980] AH01630: client denied by server configuration: /var/www/69desirs/xmlrpc.php
    [Fri Apr 29 09:00:50.710309 2016] [authz_core:error] [pid 9700] [client 92.85.162.221:49986] AH01630: client denied by server configuration: /var/www/69desirs/xmlrpc.php
    [Fri Apr 29 09:13:17.336683 2016] [authz_core:error] [pid 9916] [client 41.200.247.67:41150] AH01630: client denied by server configuration: /var/www/69desirs/xmlrpc.php
    [Fri Apr 29 09:50:41.384263 2016] [authz_core:error] [pid 12945] [client 93.157.175.168:51366] AH01630: client denied by server configuration: /var/www/69desirs/xmlrpc.php

    And i’ve got maybe 300 request to try to log with admin account in maybe 10 minutes. So i think something is going wrong.

    Thread Starter p4c

    (@p4c)

    Hi,

    It’s running on Apache version 2.4.10

Viewing 5 replies - 1 through 5 (of 5 total)