New to the community? Start here

Defender 404 Notices

I'm getting a lot of Defender 404 lockout notices all day for an events plugin, it seems, which I removed last week:

We've just locked out the host 169.48.66.93 from https://mysite.com due to more than 20 404 requests for the file /events/action~stream/tag_ids~110,145,102/request_format~html/cat_ids~1394/. They have been locked out for 300 seconds.

Not sure why I'm getting these notices when the plugin was removed or is it the database tables? I wonder if the request are coming from RSS request from the previous events posts?

Tue, 8 Jan 2019 17:58:23
  • Ash
    • Code Norris

    Hello Emmanuel

    It may happen for many reasons. Yes, it could come from an old rss feed. This is also possible that the references of your events link were stored in some other sites, some coming requests from there.

    Though looking at URL, it seems to me a request via rest API. Do you remember of any other sites using the same events you were using?

    Cheers,

    Ash

  • Ash
    • Code Norris

    Hello Emmanuel

    The IPs are blocked automatically and that's why you are getting the message. If you want to ban them permanently, please check the box and save:

    [attachments are only viewable by logged-in members]

    Is that what you meant? If not, would you please explain in a bit detail?

    Have a nice day!

    Cheers,

    Ash