I currently own a WordPress site in a hosting (BlueHost). On the other hand, I have an application in our offices in .Net. This application, updates WordPress via XMLRPC every 1 hour.
The problem is that my IP is temporarily blocked every day.
I am trying to understand what kind of solution exists to these problems. From the hosting service, they tell me that there are many attempts to login via email. They see it as email, but I know it's via XMLRPC.
- Is there any way to avoid being taken as SPAM, since it really is not?
- Is the only solution to make fewer connections? They tell me 3 or 4 per day. I need 24.
- Is there a solution at the hosting configuration level to be able to put the source IP in a white list?
I guess it must be a fairly common problem, that's why I ask it here. From already thank you very much.
If you need additional information about the way I connect, I can add the source code.
Answer from bluehost:
Thank you for contacting support. We have received your case for your IP getting blocked continuously. This is highly unusual and uncommon for an IP to get listed this much. It seems you're using the xmlrpc.php for logging in this is a common practice that we see malicious attempts from. This is because malicious attempts will try to exploit that file to gain access that they should not. I would highly recommend switching back to a standard login procedure.
Second answer fro hosting:
We are following up on your case regarding your XMLRPC logging. Unfortunately the blocking is due to a Mod Security rule within your shared server. This is a security rule within our Mod Security configurations which cannot be removed in a shared server environment. Essentially we have these Mod Security rules set up to prevent customer's from being vulnerable to exploits which XMLRPC can allow such as: https://null-byte.wonderhowto.com/how-to/gain-control-wordpress-by-exploiting-xml-rpc-0174864/