WordPress issues false positive and error when editing rules

[vishalpujari726]

Hi There,

Im getting a lot of false-positive alerts from WordPress.

POST /xmlrpc.php

33303: Wordpress Bruteforce RBL block||T:APACHE||MV:09-26.101.50.1.17

POST /wp/cc/xy/wp-admin/post.php

33314: RTrack: G: P:user_ID=1&action=editpost&originalaction=editpost&post_author=1&post_type=page&original_post_status=publish&referredby=&_wp_original_http...=&post_ID=3415..........& F:||T:APACHE||PC:270473||R:302

also when I click on one of there rules I get this error

Error: API failure: (XID ukd754) The vendor “imunify360” is not set up.

Is there is a way to exclude WordPress

[skhristich]

Hello Ibrahim,
Thank you for reaching out! To help you with this question we need a little bit more information, please create a ticket here https://cloudlinux.zendesk.com/hc/en-us/requests/new and technical experts will help you asap.
If you have any other questions, feel free to ask here.
Thank you for contacting us.

[ibrhajjaj]

More info like what?

[ibrhajjaj]

Hi Ibrahim,
why do you consider it as false-positive?

[ibrhajjaj]

Cause Im the one whos editing the post

[skhristich]

> More info like what?

Ibrahim,
We will check your logs in order to understand why there is a lot of FP.

[ibrhajjaj]

tell me what logs you want...

[skhristich]

> tell me what logs you want...

We need the information "imunify360-agent doctor" and the IP from which requests are made. Since rule 33303 is associated with RBL, that is, we need to understand why RBL is blocking. Can you open a support ticket https://cloudlinux.zendesk.com/hc/en-us/requests/new so we can take a closer look at your system? You can post the ticket number here and well link this thread to it.
Thank you.

[ibrhajjaj]

Thanks

NO.83060

Regards
I B R A H I M

[skhristich]

> Thanks
>
> NO.83060
>
> Regards
> I B R A H I M

Thank you, our specialists will answer you on the ticket as quickly as possible.

[skhristich]

Thanks for the help