• Resolved justaniceguy

    (@justaniceguy)


    As the title say, suddenly I have started getting warning message within my Sucuri dashboard within my WP installation that my IP has been blocked by sucuri website firewall. As far as I know I haven’t been doing any changes except few plugin updates. So far, for several years now everything was ok.

    I am on latest WP, having all plugins updated, latest Evolve Plus premium theme and site is running on PHP 7.4.33.

    I can always whitelist my IP but I prefer to know what happened and resolve the issue without doing it since as far as I can see IP is safe and clean.

    I am not sure should I provide more details here publicly but would be happy to provide them privately. I have already tried to contact live chat support at Sucuri site but since I am using free plugin version they have told me to write here.

    edit: I have forgot to mention that the warning window is not displayed correctly. While the frame is red the letters are white over white background.

    here is the screenshot

    Thank you.

    • This topic was modified 1 year, 10 months ago by justaniceguy.
Viewing 15 replies - 1 through 15 (of 19 total)
  • Thread Starter justaniceguy

    (@justaniceguy)

    I have tried to contact support directly on Sucuri site and was told to open ticket here since I am a free user. However, here there are topics that haven’t been replied for over 6 months ??? Heeey 6 months !!! Of course, no one has replied yet to my thread either. Why I am not surprised….

    Than I have again contacted support directly at Sucuri site telling them that here no one replies. They told me to send e-mail to [email protected] with details of my issue. Well, I did that almost 2 weeks ago. No one has replied!!!

    Really ?

    So, free users do not deserve support? I just wonder how you gonna convert free users to the ones who will purchase/subscribe to full plan…

    Totally disappointing and unprofessional. Yes, I am still waiting for solution. Thanks.

    • This reply was modified 1 year, 10 months ago by justaniceguy.
    Thread Starter justaniceguy

    (@justaniceguy)

    Still not resolved.

    Plugin Author Sucuri

    (@sucuri)

    Hey Justaniceguy sorry for the delay. the screenshot shows sitecheck where is your ip being blocked? more info would be fantastic can you send it to [email protected] and mark it attention Joshua Hammer I will be happy to take a look and help figure this out.

    Thread Starter justaniceguy

    (@justaniceguy)

    Wooohooo at last someone. Thank you Joshua, sending email (again) within a few minutes.

    • This reply was modified 1 year, 9 months ago by justaniceguy.
    Thread Starter justaniceguy

    (@justaniceguy)

    Since I don’t know if the same person is support representative here and in email conversation with me and, since there is no reply to my email with the updated details, I am posting email content here hoping to progress further with issue solving.

    Email from Sucuri suppport:

    …I ran a check of this IP through a third party tool and found the following results:

    https://cleantalk.org/blacklists/198.54.114.100

    It seems that your site or server may in fact be compromised as based on these results there are current and ongoing Brute Force attacks originating from this IP.

    If you need any assistance with cleaning the site to stop these attacks our Web Security Platform would provide a full scan, audit and cleanup of the site to help restore the reputation of this IP.

    If you’re on a shared server this issue could be originating from a different site on the same server. This can be frustrating as it’s not due to any fault of your own and it would be something you’d have to address with your host. Your hosting would need to suspend the offending site to address it….

    My reply to support after being in touch with hosting support:

    “I have contacted Namecheap support regarding the issue. Here is their reply:

    (quote) “According to my check, your Shared IP address is 198.54.114.228. The result is provided for 198.54.114.100. Also, I have checked in the Sucuri tool, the site is not blacklisted, here is the link:
    https://sitecheck.sucuri.net/results/camlessons.net” (quote end)

    I have no idea how/why Sucuri within my wordpress installation treats my website as using the IP 198.54.114.100.

    Also, as requested by Namecheap support, I have checked DNS records for my website and they are all set to IP 198.54.114.228

    Hopefully you will be able to investigate that since obviously there is an IP recognition error.

    Looking forward to your reply and honestly hoping to solve this issue which lasts for over a month.”

    I have sent email on 11th. February, today (4 day after) I still haven’t received the answer.

    Thread Starter justaniceguy

    (@justaniceguy)

    It would be nice (and professional) to have update on this and to finally have it solved…

    Thread Starter justaniceguy

    (@justaniceguy)

    Sucuri firewall is still detecting wrong IP of my website and still no reply to my sent email with details nor here…

    Thread Starter justaniceguy

    (@justaniceguy)

    Still no one has taken a look into my latest reply… Issue present and I am waiting for the answer.

    Thread Starter justaniceguy

    (@justaniceguy)

    Thank you to whoever has finally solved my issue at Sucuri side. Firewall “IP blacklisted warning” within my Sucuri dashboard has gone (before plugin has been updated to 1.8.37).

    Thread Starter justaniceguy

    (@justaniceguy)

    Same issue came back again. Starting from today Sucuri treats my website as using IP:198.54.114.100 again which is not correct.

    Someone finally fix this ?

    Thread Starter justaniceguy

    (@justaniceguy)

    2 months to fix such trivial issue…

    I am wondering what would happen if my website got infected. How long it will took for support to clean it…

    Plugin Support sucuri1

    (@sucuri1)

    @justaniceguy Again we apologize for the delayed response. Has the issue been corrected or has it returned?

    Thread Starter justaniceguy

    (@justaniceguy)

    It was corrected for a few hours before latest Sucuri update, corrected state lasted for some 10-12h (I really don’t know how long) and than went back to IP being blacklisted again which is still actual.

    It keeps treating my site as using IP:198.54.114.100 which is not correct.

    Thread Starter justaniceguy

    (@justaniceguy)

    60+ days without a fix and counting….

    Thread Starter justaniceguy

    (@justaniceguy)

    Is anyone finally going to help and fix this ?

Viewing 15 replies - 1 through 15 (of 19 total)
  • The topic ‘Suddenly my IP has been blocked by Website Firewall’ is closed to new replies.