• Hello

    I just want to report a maybe big problem with this plugin.
    Yesterday i installed the plugin on 2 of my websites at different times.
    Just after activating the plugin I could not access my wordpress admin area anymore.
    Even more, my IP address was blocked from my provider. I asked why and they told me because because of multiple wrong logins or for unusual scripts and calls. This was happening in both cases.

    After uninstalling the plugin via my mobile phone I could access all my websites again.

    I just want to report this.

    Andreas

    • This topic was modified 6 years, 7 months ago by Andreas_HGW.
Viewing 7 replies - 1 through 7 (of 7 total)
  • Moderator Marius L. J.

    (@clorith)

    Hi,

    That does sound odd, did your host say what rules you were triggering to block you?

    I would also mention to them that you were testing the future editing tool for WordPress, and that it sounds like their rules may be too strict if it triggered on you just for trying to use the editor.

    I would love to know more about the scenario, anything you are able to share so we can look into why it happened and if it was somethign we did or they did that caused it ??

    Thread Starter Andreas_HGW

    (@andreas_hgw)

    Hello

    I asked the support of my provider and they told me that the linux-function “fail2ban” was the reason to block my IP address. Could it be possible that the new editor collide with algorithms for “fail2ban” detection?

    Andreas

    Moderator Marius L. J.

    (@clorith)

    fail2ban requires your host to create the rules for it, they would have to tell us what rules they have in place and are being triggered for us to give any specifics here I’m afraid.

    Thread Starter Andreas_HGW

    (@andreas_hgw)

    I have asked them again, my question was forwarded to the second level support. So it can take maybe some day’s

    Thread Starter Andreas_HGW

    (@andreas_hgw)

    Hello

    I just got an answer from my provider. But what they answered me I’m not able to understand. Maybe you?

    Here is the process what was happening and the reason for blocking my IP:

    Access Log
    77.191.2.96 – – [08/Aug/2018:20:38:50 +0200] “POST /wp-admin/admin-ajax.php HTTP/1.0” 200 187 “https://www.mywebsite.de/wp-admin/” “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0” https://www.mywebsite.de

    Error Log
    [Wed Aug 08 20:39:52 2018] [error] [client 77.191.2.96:55722] AH01797: client denied by server configuration: /home/www/mywebsite.de/wp-includes/js/tinymce/wp-tinymce.php

    Fail2Ban Log
    2018-08-08 20:40:20,428 fail2ban.actions[2284]: WARNING [apache] Ban 77.XX.XX.XX

    filter.d/apache-auth.conf <- Filter Datei

    failregex = ^%(_apache_error_client)s (AH01797: )?client denied by server configuration: (uri )?\S*(, referer: \S+)?\s*$

    Moderator Marius L. J.

    (@clorith)

    Hi,

    Thank you for the details there.

    This appears to be a manual block, in part implemented by your host, and (possibly) in part by you or a plugin. It’s hard to say which, if you could show us the content of your .htaccess file, that would be an indicator of what is going on.

    Thread Starter Andreas_HGW

    (@andreas_hgw)

    # BEGIN iThemes Security - Diese Zeile nicht ver?ndern oder entfernen
    # iThemes Security Config Details: 2
    	# Schwarze Listenfunktion von HackRepair.com aktivieren - Sicherheit > Einstellungen > Benutzersperrung > Vorgegebene schwarze Liste
    	# Start HackRepair.com Blacklist
    	RewriteEngine on
    	# Start Abuse Agent Blocking
    	RewriteCond %{HTTP_USER_AGENT} "^Mozilla.*Indy" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Mozilla.*NEWT" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^$" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Maxthon$" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^SeaMonkey$" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Acunetix" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^binlar" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^BlackWidow" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Bolt 0" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^BOT for JCE" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Bot mailto\:craftbot@yahoo\.com" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^casper" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^checkprivacy" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^ChinaClaw" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^clshttp" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^cmsworldmap" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Custo" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Default Browser 0" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^diavol" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^DIIbot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^DISCo" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^dotbot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Download Demon" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^eCatch" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^EirGrabber" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^EmailCollector" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^EmailSiphon" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^EmailWolf" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Express WebPictures" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^extract" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^ExtractorPro" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^EyeNetIE" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^feedfinder" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^FHscan" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^FlashGet" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^flicky" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^g00g1e" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^GetRight" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^GetWeb\!" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Go\!Zilla" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Go\-Ahead\-Got\-It" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^grab" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^GrabNet" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Grafula" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^harvest" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^HMView" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Image Stripper" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Image Sucker" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^InterGET" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Internet Ninja" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^InternetSeer\.com" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^jakarta" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Java" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^JetCar" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^JOC Web Spider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^kanagawa" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^kmccrew" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^larbin" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^LeechFTP" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^libwww" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Mass Downloader" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^microsoft\.url" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^MIDown tool" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^miner" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Mister PiX" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^MSFrontPage" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Navroad" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^NearSite" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Net Vampire" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^NetAnts" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^NetSpider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^NetZIP" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^nutch" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Octopus" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Offline Explorer" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Offline Navigator" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^PageGrabber" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Papa Foto" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^pavuk" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^pcBrowser" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^PeoplePal" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^planetwork" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^psbot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^purebot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^pycurl" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^RealDownload" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^ReGet" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Rippers 0" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^sitecheck\.internetseer\.com" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^SiteSnagger" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^skygrid" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^SmartDownload" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^sucker" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^SuperBot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^SuperHTTP" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Surfbot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^tAkeOut" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Teleport Pro" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Toata dragostea mea pentru diavola" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^turnit" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^vikspider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^VoidEYE" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Web Image Collector" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebAuto" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebBandit" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebCopier" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebFetch" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebGo IS" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebLeacher" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebReaper" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebSauger" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Website eXtractor" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Website Quester" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebStripper" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebWhacker" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WebZIP" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Widow" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WPScan" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WWW\-Mechanize" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^WWWOFFLE" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Xaldon WebSpider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^Zeus" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "^zmeu" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "360Spider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "CazoodleBot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "discobot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "EasouSpider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "ecxi" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "GT\:\:WWW" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "heritrix" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "HTTP\:\:Lite" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "HTTrack" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "ia_archiver" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "id\-search" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "IDBot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Indy Library" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "IRLbot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "ISC Systems iRc Search 2\.1" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "LinksCrawler" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "LinksManager\.com_bot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "linkwalker" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "lwp\-trivial" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "MFC_Tear_Sample" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Microsoft URL Control" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Missigua Locator" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "MJ12bot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "panscient\.com" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "PECL\:\:HTTP" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "PHPCrawl" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "PleaseCrawl" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "SBIder" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "SearchmetricsBot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "SeznamBot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Snoopy" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Steeler" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "URI\:\:Fetch" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "urllib" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Web Sucker" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "webalta" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "WebCollage" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "Wells Search II" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "WEP Search" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "XoviBot" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "YisouSpider" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "zermelo" [NC,OR]
    	RewriteCond %{HTTP_USER_AGENT} "ZyBorg" [NC,OR]
    	# End Abuse Agent Blocking
    	# Start Abuse HTTP Referrer Blocking
    	RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?semalt\.com" [NC,OR]
    	RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?kambasoft\.com" [NC,OR]
    	RewriteCond %{HTTP_REFERER} "^https?://(?:[^/]+\.)?savetubevideo\.com" [NC]
    	# End Abuse HTTP Referrer Blocking
    	RewriteRule ^.* - [F,L]
    	# End HackRepair.com Blacklist, https://pastebin.com/u/hackrepair
    
    	# Hosts sperren - Sicherheit > Einstellungen > Benutzersperrung
    	SetEnvIF REMOTE_ADDR "^163\.158\.208\.198$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^163\.158\.208\.198$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^163\.158\.208\.198$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^185\.20\.185\.104$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^185\.20\.185\.104$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^185\.20\.185\.104$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^213\.183\.51\.161$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^213\.183\.51\.161$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^213\.183\.51\.161$" DenyAccess
    
    	SetEnvIF REMOTE_ADDR "^217\.147\.169\.254$" DenyAccess
    	SetEnvIF X-FORWARDED-FOR "^217\.147\.169\.254$" DenyAccess
    	SetEnvIF X-CLUSTER-CLIENT-IP "^217\.147\.169\.254$" DenyAccess
    
    	<IfModule mod_authz_core.c>
    		<RequireAll>
    			Require all granted
    			Require not env DenyAccess
    			Require not ip 163.158.208.198
    			Require not ip 185.20.185.104
    			Require not ip 213.183.51.161
    			Require not ip 217.147.169.254
    		</RequireAll>
    	</IfModule>
    	<IfModule !mod_authz_core.c>
    		Order allow,deny
    		Allow from all
    		Deny from env=DenyAccess
    		Deny from 163.158.208.198
    		Deny from 185.20.185.104
    		Deny from 213.183.51.161
    		Deny from 217.147.169.254
    	</IfModule>
    
    	# Systemdateien schützen - Sicherheit > Einstellungen > System-Optimierungen > Systemdateien
    	<files .htaccess>
    		<IfModule mod_authz_core.c>
    			Require all denied
    		</IfModule>
    		<IfModule !mod_authz_core.c>
    			Order allow,deny
    			Deny from all
    		</IfModule>
    	</files>
    	<files readme.html>
    		<IfModule mod_authz_core.c>
    			Require all denied
    		</IfModule>
    		<IfModule !mod_authz_core.c>
    			Order allow,deny
    			Deny from all
    		</IfModule>
    	</files>
    	<files readme.txt>
    		<IfModule mod_authz_core.c>
    			Require all denied
    		</IfModule>
    		<IfModule !mod_authz_core.c>
    			Order allow,deny
    			Deny from all
    		</IfModule>
    	</files>
    	<files wp-config.php>
    		<IfModule mod_authz_core.c>
    			Require all denied
    		</IfModule>
    		<IfModule !mod_authz_core.c>
    			Order allow,deny
    			Deny from all
    		</IfModule>
    	</files>
    
    	# Verzeichnisse durchsuchen deaktivieren - Sicherheit > Einstellungen > System-Optimierungen > Verzeichnisse durchsuchen
    	Options -Indexes
    
    	<IfModule mod_rewrite.c>
    		RewriteEngine On
    
    		# Systemdateien schützen - Sicherheit > Einstellungen > System-Optimierungen > Systemdateien
    		RewriteRule ^wp-admin/install\.php$ - [F]
    		RewriteRule ^wp-admin/includes/ - [F]
    		RewriteRule !^wp-includes/ - [S=3]
    		RewriteRule ^wp-includes/[^/]+\.php$ - [F]
    		RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F]
    		RewriteRule ^wp-includes/theme-compat/ - [F]
    
    		# Verd?chtige Abfragezeichenfolgen in der URL herausfiltern - Sicherheit > Einstellungen> System-Optimierungen > Verd?chtige Abfragezeichenfolgen
    		RewriteCond %{QUERY_STRING} \.\.\/ [OR]
    		RewriteCond %{QUERY_STRING} \.(bash|git|hg|log|svn|swp|cvs) [NC,OR]
    		RewriteCond %{QUERY_STRING} etc/passwd [NC,OR]
    		RewriteCond %{QUERY_STRING} boot\.ini [NC,OR]
    		RewriteCond %{QUERY_STRING} ftp: [NC,OR]
    		RewriteCond %{QUERY_STRING} https?: [NC,OR]
    		RewriteCond %{QUERY_STRING} (<|%3C)script(>|%3E) [NC,OR]
    		RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|%3D) [NC,OR]
    		RewriteCond %{QUERY_STRING} base64_decode\( [NC,OR]
    		RewriteCond %{QUERY_STRING} %24&x [NC,OR]
    		RewriteCond %{QUERY_STRING} 127\.0 [NC,OR]
    		RewriteCond %{QUERY_STRING} (globals|encode|localhost|loopback) [NC,OR]
    		RewriteCond %{QUERY_STRING} (concat|insert|union|declare) [NC,OR]
    		RewriteCond %{QUERY_STRING} %[01][0-9A-F] [NC]
    		RewriteCond %{QUERY_STRING} !^loggedout=true
    		RewriteCond %{QUERY_STRING} !^action=jetpack-sso
    		RewriteCond %{QUERY_STRING} !^action=rp
    		RewriteCond %{HTTP_COOKIE} !wordpress_logged_in_
    		RewriteCond %{HTTP_REFERER} !^https://maps\.googleapis\.com
    		RewriteRule ^.* - [F]
    	</IfModule>
    
    	# XML-RPC deaktivieren - Sicherheit > Einstellungen > WordPress-Optimierungen > XML-RPC
    	<files xmlrpc.php>
    		<IfModule mod_authz_core.c>
    			Require all denied
    		</IfModule>
    		<IfModule !mod_authz_core.c>
    			Order allow,deny
    			Deny from all
    		</IfModule>
    	</files>
    # END iThemes Security - Diese Zeile nicht ver?ndern oder entfernen
    
    # BEGIN W3TC Browser Cache
    <IfModule mod_mime.c>
        AddType text/css .css
        AddType text/x-component .htc
        AddType application/x-javascript .js
        AddType application/javascript .js2
        AddType text/javascript .js3
        AddType text/x-js .js4
        AddType text/html .html .htm
        AddType text/richtext .rtf .rtx
        AddType image/svg+xml .svg
        AddType text/plain .txt
        AddType text/xsd .xsd
        AddType text/xsl .xsl
        AddType text/xml .xml
        AddType video/asf .asf .asx .wax .wmv .wmx
        AddType video/avi .avi
        AddType image/bmp .bmp
        AddType application/java .class
        AddType video/divx .divx
        AddType application/msword .doc .docx
        AddType application/vnd.ms-fontobject .eot
        AddType application/x-msdownload .exe
        AddType image/gif .gif
        AddType application/x-gzip .gz .gzip
        AddType image/x-icon .ico
        AddType image/jpeg .jpg .jpeg .jpe
        AddType image/webp .webp
        AddType application/json .json
        AddType application/vnd.ms-access .mdb
        AddType audio/midi .mid .midi
        AddType video/quicktime .mov .qt
        AddType audio/mpeg .mp3 .m4a
        AddType video/mp4 .mp4 .m4v
        AddType video/mpeg .mpeg .mpg .mpe
        AddType application/vnd.ms-project .mpp
        AddType application/x-font-otf .otf
        AddType application/vnd.ms-opentype ._otf
        AddType application/vnd.oasis.opendocument.database .odb
        AddType application/vnd.oasis.opendocument.chart .odc
        AddType application/vnd.oasis.opendocument.formula .odf
        AddType application/vnd.oasis.opendocument.graphics .odg
        AddType application/vnd.oasis.opendocument.presentation .odp
        AddType application/vnd.oasis.opendocument.spreadsheet .ods
        AddType application/vnd.oasis.opendocument.text .odt
        AddType audio/ogg .ogg
        AddType application/pdf .pdf
        AddType image/png .png
        AddType application/vnd.ms-powerpoint .pot .pps .ppt .pptx
        AddType audio/x-realaudio .ra .ram
        AddType image/svg+xml .svg .svgz
        AddType application/x-shockwave-flash .swf
        AddType application/x-tar .tar
        AddType image/tiff .tif .tiff
        AddType application/x-font-ttf .ttf .ttc
        AddType application/vnd.ms-opentype ._ttf
        AddType audio/wav .wav
        AddType audio/wma .wma
        AddType application/vnd.ms-write .wri
        AddType application/font-woff .woff
        AddType application/font-woff2 .woff2
        AddType application/vnd.ms-excel .xla .xls .xlsx .xlt .xlw
        AddType application/zip .zip
    </IfModule>
    <IfModule mod_expires.c>
        ExpiresActive On
        ExpiresByType text/css A31536000
        ExpiresByType text/x-component A31536000
        ExpiresByType application/x-javascript A31536000
        ExpiresByType application/javascript A31536000
        ExpiresByType text/javascript A31536000
        ExpiresByType text/x-js A31536000
        ExpiresByType text/html A3600
        ExpiresByType text/richtext A3600
        ExpiresByType image/svg+xml A3600
        ExpiresByType text/plain A3600
        ExpiresByType text/xsd A3600
        ExpiresByType text/xsl A3600
        ExpiresByType text/xml A3600
        ExpiresByType video/asf A31536000
        ExpiresByType video/avi A31536000
        ExpiresByType image/bmp A31536000
        ExpiresByType application/java A31536000
        ExpiresByType video/divx A31536000
        ExpiresByType application/msword A31536000
        ExpiresByType application/vnd.ms-fontobject A31536000
        ExpiresByType application/x-msdownload A31536000
        ExpiresByType image/gif A31536000
        ExpiresByType application/x-gzip A31536000
        ExpiresByType image/x-icon A31536000
        ExpiresByType image/jpeg A31536000
        ExpiresByType image/webp A31536000
        ExpiresByType application/json A31536000
        ExpiresByType application/vnd.ms-access A31536000
        ExpiresByType audio/midi A31536000
        ExpiresByType video/quicktime A31536000
        ExpiresByType audio/mpeg A31536000
        ExpiresByType video/mp4 A31536000
        ExpiresByType video/mpeg A31536000
        ExpiresByType application/vnd.ms-project A31536000
        ExpiresByType application/x-font-otf A31536000
        ExpiresByType application/vnd.ms-opentype A31536000
        ExpiresByType application/vnd.oasis.opendocument.database A31536000
        ExpiresByType application/vnd.oasis.opendocument.chart A31536000
        ExpiresByType application/vnd.oasis.opendocument.formula A31536000
        ExpiresByType application/vnd.oasis.opendocument.graphics A31536000
        ExpiresByType application/vnd.oasis.opendocument.presentation A31536000
        ExpiresByType application/vnd.oasis.opendocument.spreadsheet A31536000
        ExpiresByType application/vnd.oasis.opendocument.text A31536000
        ExpiresByType audio/ogg A31536000
        ExpiresByType application/pdf A31536000
        ExpiresByType image/png A31536000
        ExpiresByType application/vnd.ms-powerpoint A31536000
        ExpiresByType audio/x-realaudio A31536000
        ExpiresByType image/svg+xml A31536000
        ExpiresByType application/x-shockwave-flash A31536000
        ExpiresByType application/x-tar A31536000
        ExpiresByType image/tiff A31536000
        ExpiresByType application/x-font-ttf A31536000
        ExpiresByType application/vnd.ms-opentype A31536000
        ExpiresByType audio/wav A31536000
        ExpiresByType audio/wma A31536000
        ExpiresByType application/vnd.ms-write A31536000
        ExpiresByType application/font-woff A31536000
        ExpiresByType application/font-woff2 A31536000
        ExpiresByType application/vnd.ms-excel A31536000
        ExpiresByType application/zip A31536000
    </IfModule>
    <IfModule mod_deflate.c>
            AddOutputFilterByType DEFLATE text/css text/x-component application/x-javascript application/javascript text/javascript text/x-js text/html text/richtext image/svg+xml text/plain text/xsd text/xsl text/xml image/bmp application/java application/msword application/vnd.ms-fontobject application/x-msdownload image/x-icon image/webp application/json application/vnd.ms-access application/vnd.ms-project application/x-font-otf application/vnd.ms-opentype application/vnd.oasis.opendocument.database application/vnd.oasis.opendocument.chart application/vnd.oasis.opendocument.formula application/vnd.oasis.opendocument.graphics application/vnd.oasis.opendocument.presentation application/vnd.oasis.opendocument.spreadsheet application/vnd.oasis.opendocument.text audio/ogg application/pdf application/vnd.ms-powerpoint image/svg+xml application/x-shockwave-flash image/tiff application/x-font-ttf application/vnd.ms-opentype audio/wav application/vnd.ms-write application/font-woff application/font-woff2 application/vnd.ms-excel
        <IfModule mod_mime.c>
            # DEFLATE by extension
            AddOutputFilter DEFLATE js css htm html xml
        </IfModule>
    </IfModule>
    <FilesMatch "\.(css|htc|less|js|js2|js3|js4|CSS|HTC|LESS|JS|JS2|JS3|JS4)$">
        FileETag MTime Size
        <IfModule mod_headers.c>
            Header set Pragma "public"
            Header append Cache-Control "public"
             Header unset Set-Cookie
             Header set X-Powered-By "W3 Total Cache/0.9.7"
        </IfModule>
    </FilesMatch>
    <FilesMatch "\.(html|htm|rtf|rtx|svg|txt|xsd|xsl|xml|HTML|HTM|RTF|RTX|SVG|TXT|XSD|XSL|XML)$">
        FileETag MTime Size
        <IfModule mod_headers.c>
            Header append Vary User-Agent env=!dont-vary
            Header set Pragma "public"
            Header append Cache-Control "public"
             Header set X-Powered-By "W3 Total Cache/0.9.7"
        </IfModule>
    </FilesMatch>
    <FilesMatch "\.(asf|asx|wax|wmv|wmx|avi|bmp|class|divx|doc|docx|eot|exe|gif|gz|gzip|ico|jpg|jpeg|jpe|webp|json|mdb|mid|midi|mov|qt|mp3|m4a|mp4|m4v|mpeg|mpg|mpe|mpp|otf|_otf|odb|odc|odf|odg|odp|ods|odt|ogg|pdf|png|pot|pps|ppt|pptx|ra|ram|svg|svgz|swf|tar|tif|tiff|ttf|ttc|_ttf|wav|wma|wri|woff|woff2|xla|xls|xlsx|xlt|xlw|zip|ASF|ASX|WAX|WMV|WMX|AVI|BMP|CLASS|DIVX|DOC|DOCX|EOT|EXE|GIF|GZ|GZIP|ICO|JPG|JPEG|JPE|WEBP|JSON|MDB|MID|MIDI|MOV|QT|MP3|M4A|MP4|M4V|MPEG|MPG|MPE|MPP|OTF|_OTF|ODB|ODC|ODF|ODG|ODP|ODS|ODT|OGG|PDF|PNG|POT|PPS|PPT|PPTX|RA|RAM|SVG|SVGZ|SWF|TAR|TIF|TIFF|TTF|TTC|_TTF|WAV|WMA|WRI|WOFF|WOFF2|XLA|XLS|XLSX|XLT|XLW|ZIP)$">
        FileETag MTime Size
        <IfModule mod_headers.c>
            Header set Pragma "public"
            Header append Cache-Control "public"
             Header unset Set-Cookie
             Header set X-Powered-By "W3 Total Cache/0.9.7"
        </IfModule>
    </FilesMatch>
    <FilesMatch "\.(bmp|class|doc|docx|eot|exe|ico|webp|json|mdb|mpp|otf|_otf|odb|odc|odf|odg|odp|ods|odt|ogg|pdf|pot|pps|ppt|pptx|svg|svgz|swf|tif|tiff|ttf|ttc|_ttf|wav|wri|woff|woff2|xla|xls|xlsx|xlt|xlw|BMP|CLASS|DOC|DOCX|EOT|EXE|ICO|WEBP|JSON|MDB|MPP|OTF|_OTF|ODB|ODC|ODF|ODG|ODP|ODS|ODT|OGG|PDF|POT|PPS|PPT|PPTX|SVG|SVGZ|SWF|TIF|TIFF|TTF|TTC|_TTF|WAV|WRI|WOFF|WOFF2|XLA|XLS|XLSX|XLT|XLW)$">
        <IfModule mod_headers.c>
             Header unset Last-Modified
        </IfModule>
    </FilesMatch>
    <IfModule mod_headers.c>
        Header set Referrer-Policy ""
    </IfModule>
    # END W3TC Browser Cache
    
    # BEGIN W3TC Page Cache core
    <IfModule mod_rewrite.c>
        RewriteEngine On
        RewriteBase /
        RewriteCond %{HTTP:Accept-Encoding} gzip
        RewriteRule .* - [E=W3TC_ENC:_gzip]
        RewriteCond %{HTTP_COOKIE} w3tc_preview [NC]
        RewriteRule .* - [E=W3TC_PREVIEW:_preview]
        RewriteCond %{REQUEST_METHOD} !=POST
        RewriteCond %{QUERY_STRING} =""
        RewriteCond %{REQUEST_URI} \/$
        RewriteCond %{HTTP_COOKIE} !(comment_author|wp\-postpass|w3tc_logged_out|wordpress_logged_in|wptouch_switch_toggle) [NC]
        RewriteCond "%{DOCUMENT_ROOT}/wp-content/cache/page_enhanced/%{HTTP_HOST}/%{REQUEST_URI}/_index%{ENV:W3TC_PREVIEW}.html%{ENV:W3TC_ENC}" -f
        RewriteRule .* "/wp-content/cache/page_enhanced/%{HTTP_HOST}/%{REQUEST_URI}/_index%{ENV:W3TC_PREVIEW}.html%{ENV:W3TC_ENC}" [L]
    </IfModule>
    # END W3TC Page Cache core
    # BEGIN WordPress
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /
    RewriteRule ^index\.php$ - [L]
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule . /index.php [L]
    </IfModule>
    
    # END WordPress
Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘IP Address blocked’ is closed to new replies.