Reply To: WordPress XML-RPC DDoS Protection – protect xmlrpc.php, block xmlrpc.php, forbid xmlrpc.php

Hello

I tried to allow wordpress.com domain for Jetpack but it doesn’t seem to work as expected.

<FilesMatch "^(xmlrpc\.php|wp-trackback\.php)">
Order Deny,Allow
Deny from all
Allow from wordpress.com
</FilesMatch>

But in the logs, I still have this

[403 GET / HEAD Request: 9 juillet 2014 - 19 h 53 min]
 Event Code: BFHS - Blocked/Forbidden Hacker or Spammer
 Solution: N/A - Hacker/Spammer Blocked/Forbidden
 REMOTE_ADDR: 66.155.9.148
 Host Name: wordpress.com
 SERVER_PROTOCOL: HTTP/1.0
 HTTP_CLIENT_IP:
 HTTP_FORWARDED:
 HTTP_X_FORWARDED_FOR:
 HTTP_X_CLUSTER_CLIENT_IP:
 REQUEST_METHOD: GET
 HTTP_REFERER:
 REQUEST_URI: /xmlrpc.php?for=jetpack
 QUERY_STRING:
 HTTP_USER_AGENT: The Incutio XML-RPC PHP Library

And Jetpack see the website offline

i.imgur.com/BpVlF7w.png

Should I Allow the IP address 66.155.9.148 directly ? The reverse of this ip points to wordpress.com but the domain wordpress.com doesn’t point to this IP address.

Thanks
Cedric

• This reply was modified 20 hours, 11 minutes ago by  AITpro Admin.