Blacklisted countries shown as target passed for admin

  • Hello,

    I am not a specialist but some log entries look abnormal on my site where blacklist countries are UA,BY,CN,KP,RU,SK,CL,AR,AL,BR,EE,ID,PL,SE and ‘block by country’ is active for admin target.

    I found today following entries in the IGB log:

    ’18-02-04 14:30:52 118.31.157.80 CN admin passed
    ’18-02-04 12:32:04 211.147.67.150 CN admin passed
    ’18-02-04 12:30:43 119.164.14.20 CN admin passed
    ’18-02-04 12:29:40 81.163.112.66 UA admin blocked
    ’18-02-04 00:21:29 91.200.12.193 UA admin passed
    ’18-02-02 14:10:34 91.200.12.193 UA admin passed
    ’18-02-02 05:44:06 91.200.12.193 UA admin passed
    ’18-02-02 01:47:30 121.196.211.66 CN admin passed
    ’18-01-29 09:40:48 91.200.12.193 UA admin passed

    Is it normal ? All from UA and CN should be blocked as far as I understand…

    Thanks for your help and your very desired plugin !

    Eric Collart

    The page I need help with: [log in to see the link]

Viewing 1 replies (of 1 total)
  • Plugin Author tokkonopapa

    (@tokkonopapa)

    Hi @ecollart,

    Please make sure to enable “Block by country” at not only ” Admin area“, ” Admin ajax/post” but also “Plugins area” and “Themes area” which are also categorized to admin target.

    If you already did that, please let me know not only IP address and country in Logs but also (and at least) “Request” and “$_POST data”.

    Also note that when you want to block something from the blacklisted countries for admin target, but do not want to block anything servred by ajax call on public facing pages even when those are accessed from blacklisted countries, you have two choices to satisfy your demand:

    1. Enable “Block by country” and specify the actions in “Exception” for “non logged-in user” with “unlocked icon”.
    2. Disable “Block by country” but enable “Prevent Zero-day Exploit“.

    Anyway, if you want to contact me, please send me an email to tokkonopapa at yahoo dot com.

    Thanks.

Viewing 1 replies (of 1 total)
  • The topic ‘Blacklisted countries shown as target passed for admin’ is closed to new replies.