New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Unable to access VPS (SSH/web server) after a period of time
abytecurious
Member
in Help
This is a really weird problem I am facing. I have a VPS where I have installed Centminmod to host Wordpress sites. As long as I am just viewing the sites, everything is great. When I spend time to configure the site by working on the Wordpress backend, I get locked out from accessing the node. I can't SSH into it, visit the site from a browser or even ping it. I know the site is up since I can access it from my Paperspace Windows desktop. It also has Hetrixtools monitoring, so there is no downtime. Hours later, I can connect again (until I am locked out again).
I wonder what the problem could be. Any ideas on where to start looking? Thanks
Comments
Random, most likely guess: Your IP is getting blacklisted/banned because something is reading those logs and decides "hacker". SSH from other IP, check your logs, check yours firewall, fail2ban, some other scan thing? Rate limits for 'backend'? Some security mode?
You have blocked by the firewall temporarily. First check the firewall rules. it's a very common issue. While working on your wordpress site you have triggered any of the firewall rules mistakenly. You can whitelist your ip to prevent further blocking. During lock out, You can also use a vpn and access ssh and remove your ip from the blacklist.
https://www.google.com/search?q=Centminmod+lock+out+site:community.centminmod.com&sxsrf=AB5stBgs0_Xo-YyKsjlgGxw-2hRu7lYxNA:1689089759432&sa=X&ved=2ahUKEwjE7urY_YaAAxXG-jgGHTNYCMsQrQIoBHoECBAQBQ&biw=1366&bih=649&dpr=1
Thanks JabJab. I'll have a look.
Thanks @jobayer I forgot that there was CSF on the server. The link gave me some useful hints. Let me try that now.
Edit: Turns out it was CSF. The theme references Font Awesome files but is missing them in the assets folder. CSF tracks 404s and once this hits 50 in an hour, blocks my IP for 24 hours.