Sucuri says IP failed to login but it is another IP that tries to login
-
Hi,
I configured Sucuri to send me an email when some IP failed to login to my site. Every IP I then add to my htaccess to block it.
But every day for the last week there’s one IP I blocked, and still receive Sucuri messages that the IP has failed to login. So this IP is already blocked and redirected away from my site in htaccess.
Searching the apache access logs for that IP shows it does NOT connect to my site at all, where other IPs do that Sucuri notifies me of. At the time of login I notice another IP address trying to login.What can be wrong wrong here? Is there a failure in IP lookup by sucuri? Is the IP address spoofed? Here’s the reverse lookup by Sucuri: 109.200.232.150.pool.breezein.net
Here’s the IP addresses connecting at the time of sucuri notify mail:
196.250.23.70 and
193.93.228.223Here’s the code:
# 3-8 block IP
<IfModule mod_rewrite.c>
RewriteCond %{REMOTE_ADDR} =109.200.232.150
RewriteRule .* https://theuselessweb.com [L]
</IfModule>Thanks for your time and thoughts!
Regards, Jack.
- The topic ‘Sucuri says IP failed to login but it is another IP that tries to login’ is closed to new replies.
