Admin Tools

#27169 Multiple "Automatic IP blocking notification for..." with same timestamp?

Posted in ‘Admin Tools for Joomla! 4 & 5’

This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version

n/a

PHP version

n/a

Admin Tools version

n/a

Latest post by on Wednesday, 22 March 2017 18:17 CDT

Monday, 20 February 2017 07:22 CST

shockoe

I have been receiving multiple "Automatic IP blocking notification for..." with same timestamp? This has been happening to several of my Joomla sites over the past few days.

I'm not sure how this would be happening, since the IP should be blocked after the first incident?

I have attached screenshots to show some details.

Monday, 20 February 2017 08:30 CST

tampe125

Hello,

I suspect that the attacker send out all the connections at the same time.
You site handled them in parallel and when they get blocked, your database had no records of the ongoing attacks, so the ban is not immediate.
However, you don't have to worry about, since the requests were all blocked and the attacker is already banned, so he can't bother you anymore.

Davide Tampellini

Developer and Support Staff

🇮🇹Italian: native 🇬🇧English: good • 🕐 My time zone is Europe / Rome (UTC +1)
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Wednesday, 22 March 2017 18:17 CDT

System Task

system

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.

Edited by on 2017-03-22 18:17 CDT

Support