Replies: 0
Hey guy,
I am very headache for the past few days, I realise my site resources being suck out from this IP: 181.224.158.20, average 1.6GB-1.8GB bandwidth daily from this IP. My own IP access to my site is 222.164.227.90 (dynamic ip), but the wordfence live traffic told me that the Login Attempts is 181.224.158.20 instead of 222.164.227.90.
Below log while I am still in sleeping:
Panama Panama visited http://www.xxx.com/wp-login.php?redirect_to=http%3A%2F%xxx.com%2Fwp-admin%2Fadmin.php%3Fpage%3Dw3tc_extensions&reauth…
03/05/2017 06:31:43 (54 minutes ago) IP: 181.224.158.20 [block] Hostname: ip-181-224-158-20.siteground.com
Browser: Firefox version 43.0 running on Win7
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0
=========
Panama Panama arrived from http://www.baidu.com/s?wd=www and visited http://www.xxx.com/wp-login.php?action=logout&_wpnonce=030a249598
03/05/2017 06:30:49 (57 minutes ago) IP: 181.224.158.20 [block] Hostname: ip-181-224-158-20.siteground.com
Browser: Firefox version 43.0 running on Win7
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0
=========
This log is I have logged into my site:
Panama Panama left http://www.xxx.com/wp-login.php?redirect_to=http%3A%2F%2xxx.com%2Fwp-admin%2F&reauth=1 and logged in successfully as “adam”. http://www.xxx.com/wp-login.php
03/05/2017 07:14:41 (12 minutes ago) IP: 181.224.158.20 [block] Hostname: ip-181-224-158-20.siteground.com
Browser: Chrome version 57.0 running on MacOSX
=========
I tried to block the IP 181.224.158.20 but failed, wordfence told me that I cannot self block my own IP… I was surprised receive this msg, so I choose to block it via cPanel, however result show me that I cannot access to the site or even the admin from back end, I use my iPhone also cannot access until I unblock it from cPanel.
The domain name is registered via NameCheap, pointed to CloudFlare, and pointed back to my hosting.
Any idea what happen to my site? Is it because I am using the learning mode so it’s a part from Wordfence self tracking and hacking to enhance the protection?
Sorry for long details but hope anyone of you can give me more advise.
Thanks in advance!
(Using updated Wordfence 6.3.8 now)
Adam