Hi. I manual ban IP address in hestia CP
but in log I keep seeing
89.208.107.26 - - [14/Jul/2023:20:10:36 +0300] “POST /wp-admin/admin-ajax.php?action=joomsport_md_load HTTP/1.0” 404 3253 “-” "Mozilla/5.0 (Wi
there are two addresses in my log with suspicious activity, both banned
I have a similar problem. Were you able to find a solution?
@Konstantinus It’s better not to revive a topic that’s two years old, you can reference it, but it’s better to open a new one.
Anyway, are you using a CDN like Cloudflare? If the answer is yes, the IP you see in the logs isn’t connecting directly to your server, it’s a Cloudflare IP that’s connecting, so the firewall rule has no effect.
1 Like