Mod_security Issue

[hmaddy]

All ips are blocking in firewalls. how to prevent this.???

wht is this modsec rule and how to avoid this .?

Screenshot

Captured with Lightshot

prnt.sc

 

[hmaddy]

Its due to the wordpress xmlrpc attack. so how to prevent it.

 

[MaXi32]

Yes, because it detects someone is brute forcing xmlrpc. See this post how to prevent (exclude modsecurity RULE ID):

modsecurity breaks Wordpress

Fresh DA server install on AlmaLinux. I followed this guide as part of my task to secure the new server: https://docs.directadmin.com/operation-system-level/securing/general.html#basic-system-security Regarding item number 8: Enable mod_security.open in new window See the CustomBuild Faqopen...

forum.directadmin.com