Again, this blog post is mainly for something I wish existed elsewhere.
The last few months there’s been an increase in cyber activity from certain parts of the world that have seemingly only been mitigated by blocking certain countries. Traffic from China and Singapore mainly has been the main source of the trouble. I’ve talked about it before now.
However, this has had a knock on effect in that a few pinging tools use servers in that part of the world, and can get caught up in them, resulting in the site appearing down. Manage WP is one of those tools.
After a bit of a Google, I managed to find a list of IP addresses that ManageWP, and I needed to turn them to a Cloudflare security rule. Entering a bunch of URL’s manually takes a lot of time, however you can make a quick rule that you can paste below.
How to use the IP Addresses in Cloudflare
Log into Cloudflare and go to Security > Security Rules for your domain. From there, click the “Create Rule” button, and select “Custom Rule”.
From the next screen give the rule a name and then click “Edit Expression”.
Copy and paste the below box and paste this into the box in question.
(ip.src in {34.211.180.66 54.70.65.107 34.210.224.7 52.41.5.108 52.35.72.129}) or (ip.src eq 54.191.137.17) or (ip.src in {35.162.254.253 52.11.12.231 52.11.29.70 52.11.54.161 52.24.142.159 52.25.191.255 52.34.126.117 52.34.254.47 52.35.82.99 52.36.28.80 52.39.177.152 52.41.237.12 52.43.13.71 52.43.76.224 52.88.96.110 52.89.155.51 54.187.92.57 54.191.32.65 54.191.67.23 54.191.80.119 54.191.135.209 54.191.136.176 54.191.148.85 54.191.149.8 52.26.122.21 52.24.187.29 52.89.85.107 54.186.128.167 54.191.40.136 52.88.119.122 52.89.94.121 52.25.116.116 52.88.215.225 54.186.143.184 52.88.197.180 52.27.171.126 34.211.178.241 52.24.232.158 52.26.187.210 52.42.189.119 54.186.244.128 54.71.54.102 34.210.35.214 34.213.77.188 34.218.121.176 52.10.190.191 52.10.225.96 52.11.187.168 52.25.139.76 52.43.127.200 54.191.108.9 54.70.201.228 44.224.174.169 52.32.57.81 44.225.177.160 34.223.186.249 44.224.135.238 44.226.111.14 44.225.203.104 44.226.100.122 44.224.250.144 44.225.118.211 54.189.93.69 44.231.184.112 44.238.10.27 54.185.116.30 44.238.58.95 52.13.23.154 54.149.16.35 44.226.97.20 54.244.242.144 44.238.67.135 44.235.15.76 54.214.47.164 34.214.48.135 54.184.234.227 44.238.241.95 52.37.217.170}) or (ip.src eq 54.191.137.17) or (ip.src in {35.162.254.253 52.11.12.231 52.11.29.70 52.11.54.161 52.24.142.159 52.25.191.255 52.34.126.117 52.34.254.47 52.35.82.99 52.36.28.80 52.39.177.152 52.41.237.12 52.43.13.71 52.43.76.224 52.88.96.110 52.89.155.51 54.187.92.57 54.191.32.65 54.191.67.23 54.191.80.119 54.191.135.209 54.191.136.176 54.191.148.85 54.191.149.8 52.26.122.21 52.24.187.29 52.89.85.107 54.186.128.167 54.191.40.136 52.88.119.122 52.89.94.121 52.25.116.116 52.88.215.225 54.186.143.184 52.88.197.180 52.27.171.126 34.211.178.241 52.24.232.158 52.26.187.210 52.42.189.119 54.186.244.128 54.71.54.102 34.210.35.214 34.213.77.188 34.218.121.176 52.10.190.191 52.10.225.96 52.11.187.168 52.25.139.76 52.43.127.200 54.191.108.9 54.70.201.228 44.224.174.169 52.32.57.81 44.225.177.160 34.223.186.249 44.224.135.238 44.226.111.14 44.225.203.104 44.226.100.122 44.224.250.144 44.225.118.211 54.189.93.69 44.231.184.112 44.238.10.27 54.185.116.30 44.238.58.95 52.13.23.154 54.149.16.35 44.226.97.20 54.244.242.144 44.238.67.135 44.235.15.76 54.214.47.164 34.214.48.135 54.184.234.227 44.238.241.95 52.37.217.170}) or (ip.src in {34.214.212.42 54.203.109.179}) or (ip.src in {35.162.140.124 54.184.226.94 35.162.140.124 54.184.226.94 3.218.31.131 54.162.61.185})I like to click the “Use Expression Builder” button when pasted in, so you can quickly scan to make sure that the rule works as intended. In the “Choose Action”, select “Skip”. Leave “Log matching requests” enabled and tick all checkboxes under “WAF components to skip”.
Make sure the rule runs first and when satisfied, click “Deploy”.
In reality, you won’t notice anything changing (unless you have ManageWP’s uptime monitor, which should be able to “see” your website again). But that will allow ManageWP to access your WordPress website.
Now I can bookmark this post so I don’t have to rebuild these posts from scratch!