• Resolved cwiser249

    (@cwiser249)


    Hello

    I am uploading image from admin-ajax.php but not working. all image goes my custom folder like : /wp-content/uploads/userData/174/

    getting me below error.

    Sorry 103.250.139.135, your request cannot be processed.
    For security reasons, it was blocked and logged.

    if i uninstall this plugin. then my code working fine.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author nintechnet

    (@nintechnet)

    Do you allow uploads in the Firewall Policies page?
    Can you check the firewall log (NinjaFirewall > Logs > Firewall Log) and paste here the lines showing the blocked attempts?

    Thread Starter cwiser249

    (@cwiser249)

    DATE         INCIDENT  LEVEL     RULE     IP            REQUEST
    27/Oct/20 22:02:56  #5350630  HIGH       310  58.97.231.38     GET /wp-admin/admin-ajax.php - Access to a configuration file - [GET:img = ../wp-config.php] - www.steuerberater.de
    28/Oct/20 00:37:06  #2378129  HIGH         -  142.4.213.36     GET /index.php - User enumeration scan (author archives) - [author=1] - www.steuerberater.de
    28/Oct/20 00:37:06  #6873629  HIGH         -  142.4.213.36     GET /index.php - User enumeration scan (author archives) - [author=2] - www.steuerberater.de
    28/Oct/20 03:21:48  #6886266  HIGH         -  37.187.53.168    GET /index.php - User enumeration scan (author archives) - [author=1] - steuerberater.de
    28/Oct/20 06:43:20  #8569348  INFO         -  103.250.145.57   POST /wp-login.php - Logged in user - [[email protected] (administrator)] - www.steuerberater.de
    28/Oct/20 09:15:16  #6348432  HIGH         -  62.210.178.121   GET /index.php - User enumeration scan (author archives) - [author=1] - www.steuerberater.de
    28/Oct/20 09:15:16  #6100066  HIGH         -  62.210.178.121   GET /index.php - User enumeration scan (author archives) - [author=2] - www.steuerberater.de
    28/Oct/20 09:16:35  #3728129  HIGH         -  195.154.194.28   GET /index.php - User enumeration scan (author archives) - [author=1] - www.steuerberater.de
    28/Oct/20 09:16:35  #4694907  HIGH         -  195.154.194.28   GET /index.php - User enumeration scan (author archives) - [author=2] - www.steuerberater.de
    28/Oct/20 11:57:58  #3881480  UPLOAD       -  94.31.81.40      POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [jonasaaron.PNG (21,595 bytes)] - www.steuerberater.de
    28/Oct/20 12:38:23  #8817626  UPLOAD       -  94.31.81.40      POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [berlin-welcomecard_hero_2880__1.jpg (544,810 bytes)] - www.steuerberater.de
    28/Oct/20 12:39:13  #7919960  CRITICAL   520  94.31.81.40      POST /wp-admin/admin-ajax.php - Data URI scheme or PHP wrappers - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEASABIAAD/7QBIUGhvdG9zaG9wIDMuMAA4QklNBAQAAAAAAA8cAVoAAxslRxwCAAACAAIAOEJJTQQlAAAAAAAQ/OEfici3yXgvNGI0B1h36//hABhFeGlmAABJ...] - www.steuerberater.de
    28/Oct/20 12:39:43  #4299633  UPLOAD       -  94.31.81.40      POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [berlin-welcomecard_hero_2880__1.jpg (544,810 bytes)] - www.steuerberater.de
    28/Oct/20 12:40:30  #8506222  CRITICAL   520  94.31.81.40      POST /wp-admin/admin-ajax.php - Data URI scheme or PHP wrappers - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,UklGRgg2AQBXRUJQVlA4IPw1AQAQagidASqABzgEPm02l0kkIyIhIjI5aIANiWduc6dezzO82/7cLsSHyAvG0Fe9xsjf1iIvLQH6AdWPHvlb/39556f+Ntv+q/9nnhc7fZ+IF5p6m3l0...] - www.steuerberater.de
    28/Oct/20 12:41:09  #5702404  UPLOAD       -  94.31.81.40      POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Kanzlei-3.jpg (79,376 bytes)] - www.steuerberater.de
    28/Oct/20 12:41:10  #2585704  CRITICAL   520  94.31.81.40      POST /wp-admin/admin-ajax.php - Data URI scheme or PHP wrappers - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,UklGRgg2AQBXRUJQVlA4IPw1AQAQagidASqABzgEPm02l0kkIyIhIjI5aIANiWduc6dezzO82/7cLsSHyAvG0Fe9xsjf1iIvLQH6AdWPHvlb/39556f+Ntv+q/9nnhc7fZ+IF5p6m3l0...] - www.steuerberater.de
    28/Oct/20 13:01:42  #4376557  UPLOAD       -  94.31.81.40      POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [jonas2.jpg (394,512 bytes)] - www.steuerberater.de
    28/Oct/20 13:01:53  #8012213  CRITICAL   520  94.31.81.40      POST /wp-admin/admin-ajax.php - Data URI scheme or PHP wrappers - [POST:use_profile_image = data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAkACQAAD/2wBDAAMCAgMCAgMDAwMEAwMEBQgFBQQEBQoHBwYIDAoMDAsKCwsNDhIQDQ4RDgsLEBYQERMUFRUVDA8XGBYUGBIUFRT/2wBDAQMEBAUEBQkFBQkUDQsNFBQUFBQU...] - www.steuerberater.de
    28/Oct/20 13:05:49  #1564293  UPLOAD       -  94.31.81.40      POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [jonas2.jpg (394,512 bytes)] - www.steuerberater.de
    28/Oct/20 13:18:41  #3842154  INFO         -  94.31.81.40      POST /wp-login.php - Logged in user - [jhalberkamp (administrator)] - www.steuerberater.de
    28/Oct/20 13:25:43  #6923323  UPLOAD       -  94.31.81.40      POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [jonas2.jpg (394,512 bytes)] - www.steuerberater.de
    28/Oct/20 13:25:49  #8428803  CRITICAL   520  94.31.81.40      POST /wp-admin/admin-ajax.php - Data URI scheme or PHP wrappers - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAkACQAAD/2wBDAAMCAgMCAgMDAwMEAwMEBQgFBQQEBQoHBwYIDAoMDAsKCwsNDhIQDQ4RDgsLEBYQERMUFRUVDA8XGBYUGBIUFRT/2wBDAQMEBAUEBQkFBQkU...] - www.steuerberater.de
    28/Oct/20 14:41:48  #6444622  HIGH         -  198.245.50.142   GET /index.php - User enumeration scan (author archives) - [author=1] - www.steuerberater.de
    28/Oct/20 14:41:48  #3479488  HIGH         -  198.245.50.142   GET /index.php - User enumeration scan (author archives) - [author=2] - www.steuerberater.de
    28/Oct/20 15:15:20  #1243793  HIGH         -  35.234.123.96    GET /index.php - User enumeration scan (author archives) - [author=1] - steuerberater.de
    28/Oct/20 15:16:57  #7691416  HIGH         -  198.245.49.141   GET /index.php - User enumeration scan (author archives) - [author=1] - www.steuerberater.de
    28/Oct/20 15:16:58  #5237476  HIGH         -  198.245.49.141   GET /index.php - User enumeration scan (author archives) - [author=2] - www.steuerberater.de
    28/Oct/20 20:10:41  #5027056  MEDIUM     531  104.131.113.241  HEAD /index.php - Suspicious bots/scanners - [SERVER:HTTP_USER_AGENT = Mozilla/4.0 (compatible; Netcraft Web Server Survey)] - live.steuerberater.de
    28/Oct/20 23:12:46  #1262959  HIGH         -  192.99.2.71      GET /index.php - User enumeration scan (author archives) - [author=1] - www.steuerberater.de
    28/Oct/20 23:12:46  #6916863  HIGH         -  192.99.2.71      GET /index.php - User enumeration scan (author archives) - [author=2] - www.steuerberater.de
    29/Oct/20 00:06:02  #3724745  HIGH         -  198.245.50.13    GET /index.php - User enumeration scan (author archives) - [author=1] - www.steuerberater.de
    29/Oct/20 00:06:02  #6431972  HIGH         -  198.245.50.13    GET /index.php - User enumeration scan (author archives) - [author=2] - www.steuerberater.de
    29/Oct/20 00:12:36  #7826583  HIGH         -  142.4.213.149    GET /index.php - User enumeration scan (author archives) - [author=1] - www.steuerberater.de
    29/Oct/20 00:12:36  #1267474  HIGH         -  142.4.213.149    GET /index.php - User enumeration scan (author archives) - [author=2] - www.steuerberater.de
    29/Oct/20 04:08:13  #2965669  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=1] - www.steuerberater.de
    29/Oct/20 04:08:16  #7011467  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=2] - www.steuerberater.de
    29/Oct/20 04:08:21  #2703188  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=3] - www.steuerberater.de
    29/Oct/20 04:08:27  #8381305  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=4] - www.steuerberater.de
    29/Oct/20 04:08:30  #8603919  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=5] - www.steuerberater.de
    29/Oct/20 04:08:32  #2480154  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=6] - www.steuerberater.de
    29/Oct/20 04:08:33  #5700239  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=7] - www.steuerberater.de
    29/Oct/20 04:08:36  #7344020  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=8] - www.steuerberater.de
    29/Oct/20 04:08:41  #8296212  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=9] - www.steuerberater.de
    29/Oct/20 04:08:44  #1644178  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=10] - www.steuerberater.de
    29/Oct/20 04:08:51  #7133237  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=11] - www.steuerberater.de
    29/Oct/20 04:08:56  #7766272  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=12] - www.steuerberater.de
    29/Oct/20 04:09:06  #3870589  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=13] - www.steuerberater.de
    29/Oct/20 04:09:11  #2742358  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=14] - www.steuerberater.de
    29/Oct/20 04:09:14  #2926933  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=15] - www.steuerberater.de
    29/Oct/20 04:09:17  #1069399  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=16] - www.steuerberater.de
    29/Oct/20 04:09:19  #3159627  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=17] - www.steuerberater.de
    29/Oct/20 04:09:21  #6439316  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=18] - www.steuerberater.de
    29/Oct/20 04:09:23  #2478089  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=19] - www.steuerberater.de
    29/Oct/20 04:09:26  #2351645  HIGH         -  106.55.47.205    GET /index.php - User enumeration scan (author archives) - [author=20] - www.steuerberater.de
    29/Oct/20 05:55:45  #7795222  HIGH         -  142.4.212.149    GET /index.php - User enumeration scan (author archives) - [author=1] - www.steuerberater.de
    29/Oct/20 05:55:45  #6879628  HIGH         -  142.4.212.149    GET /index.php - User enumeration scan (author archives) - [author=2] - www.steuerberater.de
    29/Oct/20 06:19:05  #3696161  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Lighthouse.jpg (561,276 bytes)] - www.steuerberater.de
    29/Oct/20 06:19:05  #2301215  CRITICAL     -  103.250.139.135  POST /wp-admin/admin-ajax.php - BASE64-encoded injection - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAYABgAAD/7gAOQWRvYmUAZAAAAAAB/+EN/kV4aWYAAE1NACoAAAAIAAgBMgACAAAAFAAAAG4BOwACAAAACwAAAIJHRgADAAAAAQAFAABHSQADAAAAAQBYAACC...] - www.steuerberater.de
    29/Oct/20 06:19:37  #6340148  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Lighthouse.jpg (561,276 bytes)] - www.steuerberater.de
    29/Oct/20 06:19:37  #6587923  CRITICAL     -  103.250.139.135  POST /wp-admin/admin-ajax.php - BASE64-encoded injection - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAYABgAAD/7gAOQWRvYmUAZAAAAAAB/+EN/kV4aWYAAE1NACoAAAAIAAgBMgACAAAAFAAAAG4BOwACAAAACwAAAIJHRgADAAAAAQAFAABHSQADAAAAAQBYAACC...] - www.steuerberater.de
    29/Oct/20 06:21:02  #4768560  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Lighthouse.jpg (561,276 bytes)] - www.steuerberater.de
    29/Oct/20 06:21:02  #5862828  CRITICAL     -  103.250.139.135  POST /wp-admin/admin-ajax.php - BASE64-encoded injection - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAYABgAAD/7gAOQWRvYmUAZAAAAAAB/+EN/kV4aWYAAE1NACoAAAAIAAgBMgACAAAAFAAAAG4BOwACAAAACwAAAIJHRgADAAAAAQAFAABHSQADAAAAAQBYAACC...] - www.steuerberater.de
    29/Oct/20 06:23:17  #7151247  INFO         -  103.250.139.135  POST /wp-login.php - Logged in user - [[email protected] (administrator)] - www.steuerberater.de
    29/Oct/20 06:24:44  #2233082  INFO         -  103.250.139.135  GET /wp-admin/plugins.php - Plugin deactivated by [email protected] - [Name: ninjafirewall/ninjafirewall.php] - www.steuerberater.de
    29/Oct/20 06:27:19  #6273871  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Penguins.jpg (777,835 bytes)] - www.steuerberater.de
    29/Oct/20 06:27:19  #8629733  CRITICAL     -  103.250.139.135  POST /wp-admin/admin-ajax.php - BASE64-encoded injection - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAYABgAAD/7gAOQWRvYmUAZAAAAAAB/+ESCEV4aWYAAE1NACoAAAAIAAcBMgACAAAAFAAAAGIBOwACAAAABwAAAHZHRgADAAAAAQAEAABHSQADAAAAAQA/AACc...] - www.steuerberater.de
    29/Oct/20 06:50:31  #2452664  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Penguins.jpg (777,835 bytes)] - www.steuerberater.de
    29/Oct/20 06:50:51  #2782465  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Penguins.jpg (777,835 bytes)] - www.steuerberater.de
    29/Oct/20 06:50:51  #2561344  CRITICAL     -  103.250.139.135  POST /wp-admin/admin-ajax.php - BASE64-encoded injection - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAYABgAAD/7gAOQWRvYmUAZAAAAAAB/+ESCEV4aWYAAE1NACoAAAAIAAcBMgACAAAAFAAAAGIBOwACAAAABwAAAHZHRgADAAAAAQAEAABHSQADAAAAAQA/AACc...] - www.steuerberater.de
    29/Oct/20 06:52:19  #3138258  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Penguins.jpg (777,835 bytes)] - www.steuerberater.de
    29/Oct/20 06:52:19  #1666345  CRITICAL     -  103.250.139.135  POST /wp-admin/admin-ajax.php - BASE64-encoded injection - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAYABgAAD/7gAOQWRvYmUAZAAAAAAB/+ESCEV4aWYAAE1NACoAAAAIAAcBMgACAAAAFAAAAGIBOwACAAAABwAAAHZHRgADAAAAAQAEAABHSQADAAAAAQA/AACc...] - www.steuerberater.de
    29/Oct/20 06:54:15  #2755533  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Tulips.jpg (620,888 bytes)] - www.steuerberater.de
    29/Oct/20 06:54:37  #4106589  CRITICAL   520  103.250.139.135  POST /wp-admin/admin-ajax.php - Data URI scheme or PHP wrappers - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAYABgAAD/4RKGRXhpZgAATU0AKgAAAAgABwEyAAIAAAAUAAAAYkdGAAMAAAABAAQAAEdJAAMAAAABAD8AAIKYAAIAAAAWAAAAdpydAAEAAAAcAAAAAOocAAcA...] - www.steuerberater.de
    29/Oct/20 07:09:37  #8301001  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Tulips.jpg (620,888 bytes)] - www.steuerberater.de
    29/Oct/20 07:09:59  #7611665  CRITICAL   520  103.250.139.135  POST /wp-admin/admin-ajax.php - Data URI scheme or PHP wrappers - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAYABgAAD/4RKGRXhpZgAATU0AKgAAAAgABwEyAAIAAAAUAAAAYkdGAAMAAAABAAQAAEdJAAMAAAABAD8AAIKYAAIAAAAWAAAAdpydAAEAAAAcAAAAAOocAAcA...] - www.steuerberater.de
    29/Oct/20 07:13:59  #6283030  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Tulips.jpg (620,888 bytes)] - www.steuerberater.de
    29/Oct/20 07:14:21  #4917298  CRITICAL   520  103.250.139.135  POST /wp-admin/admin-ajax.php - Data URI scheme or PHP wrappers - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAYABgAAD/4RKGRXhpZgAATU0AKgAAAAgABwEyAAIAAAAUAAAAYkdGAAMAAAABAAQAAEdJAAMAAAABAD8AAIKYAAIAAAAWAAAAdpydAAEAAAAcAAAAAOocAAcA...] - www.steuerberater.de
    29/Oct/20 07:15:47  #5277405  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Tulips.jpg (620,888 bytes)] - www.steuerberater.de
    29/Oct/20 07:16:10  #1274879  CRITICAL   520  103.250.139.135  POST /wp-admin/admin-ajax.php - Data URI scheme or PHP wrappers - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAYABgAAD/4RKGRXhpZgAATU0AKgAAAAgABwEyAAIAAAAUAAAAYkdGAAMAAAABAAQAAEdJAAMAAAABAD8AAIKYAAIAAAAWAAAAdpydAAEAAAAcAAAAAOocAAcA...] - www.steuerberater.de
    29/Oct/20 07:19:56  #5355061  INFO         -  103.250.139.135  POST /wp-admin/admin-ajax.php - Plugin installed by [email protected] - [Name: cleantalk-spam-protect] - www.steuerberater.de
    29/Oct/20 07:20:40  #5669412  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Tulips.jpg (620,888 bytes)] - www.steuerberater.de
    29/Oct/20 07:21:02  #6090270  CRITICAL   520  103.250.139.135  POST /wp-admin/admin-ajax.php - Data URI scheme or PHP wrappers - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAYABgAAD/4RKGRXhpZgAATU0AKgAAAAgABwEyAAIAAAAUAAAAYkdGAAMAAAABAAQAAEdJAAMAAAABAD8AAIKYAAIAAAAWAAAAdpydAAEAAAAcAAAAAOocAAcA...] - www.steuerberater.de
    29/Oct/20 07:24:24  #1544153  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Tulips.jpg (620,888 bytes)] - www.steuerberater.de
    29/Oct/20 07:24:46  #3634117  CRITICAL   520  103.250.139.135  POST /wp-admin/admin-ajax.php - Data URI scheme or PHP wrappers - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAYABgAAD/4RKGRXhpZgAATU0AKgAAAAgABwEyAAIAAAAUAAAAYkdGAAMAAAABAAQAAEdJAAMAAAABAD8AAIKYAAIAAAAWAAAAdpydAAEAAAAcAAAAAOocAAcA...] - www.steuerberater.de
    29/Oct/20 07:35:16  #5430311  UPLOAD       -  103.250.139.135  POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [Jellyfish.jpg (775,702 bytes)] - www.steuerberater.de
    29/Oct/20 07:35:16  #4754964  CRITICAL   520  103.250.139.135  POST /wp-admin/admin-ajax.php - Data URI scheme or PHP wrappers - [POST:WPU_user_gallery_image_hidden = data:image/jpeg;base64,/9j/4AAQSkZJRgABAgEAYABgAAD/4QwtRXhpZgAATU0AKgAAAAgABwEyAAIAAAAUAAAAYkdGAAMAAAABAAUAAEdJAAMAAAABAFgAAIKYAAIAAAAWAAAAdpydAAEAAAAUAAAAAOocAAcA...] - www.steuerberater.de
    29/Oct/20 08:57:34  #1995579  UPLOAD       -  94.31.81.40      POST /wp-admin/admin-ajax.php - File upload detected, no action taken - [jonas2.jpg (394,512 bytes)] - www.steuerberater.de
    29/Oct/20 08:57:45  #6339581  CRITICAL   520  94.31.81.40      POST /wp-admin/admin-ajax.php - Data URI scheme or PHP wrappers - [POST:use_profile_image = data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAkACQAAD/2wBDAAMCAgMCAgMDAwMEAwMEBQgFBQQEBQoHBwYIDAoMDAsKCwsNDhIQDQ4RDgsLEBYQERMUFRUVDA8XGBYUGBIUFRT/2wBDAQMEBAUEBQkFBQkUDQsNFBQUFBQU...] - www.steuerberater.de
    29/Oct/20 10:13:06  #5352917  HIGH         -  142.4.213.36     GET /index.php - User enumeration scan (author archives) - [author=1] - www.steuerberater.de
    29/Oct/20 10:13:06  #3998841  HIGH         -  142.4.213.36     GET /index.php - User enumeration scan (author archives) - [author=2] - www.steuerberater.de
    29/Oct/20 10:26:26  #3270245  HIGH         -  198.100.145.152  GET /index.php - User enumeration scan (author archives) - [author=1] - www.steuerberater.de
    29/Oct/20 10:26:26  #5955949  HIGH         -  198.100.145.152  GET /index.php - User enumeration scan (author archives) - [author=2] - www.steuerberater.de
    29/Oct/20 12:23:04  #1418797  INFO         -  103.250.139.135  POST /wp-login.php - Logged in user - [[email protected] (administrator)] - www.steuerberater.de
    Plugin Author nintechnet

    (@nintechnet)

    I found the problem: the firewall engine was allowing images in Data URI scheme, but one extension was wrong: JEPG instead of JPEG.
    I just pushed new security rules to fix the bug: log in to WordPress, go to “NinjaFirewall > Security Rules” and click “Check for Updates Now”. That will download the latest rules (2020-10-29.1).

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘image upload not working’ is closed to new replies.