ManageWP Orion cannot connect

[Chykalophia]

I added the suggested code here: http://forum.ait-pro.com/forums/topic/managewp-403-error-post/ Though I’m still unable to add my site to ManageWP. First, here is the copy from the security log (with security keys removed for obvious reasons):

[403 POST Request: December 28, 2015 - 11:35 am]
Event Code: BFHS - Blocked/Forbidden Hacker or Spammer
Solution: N/A - Hacker/Spammer Blocked/Forbidden
REMOTE_ADDR: 54.191.32.65
Host Name: ec2-54-191-32-65.us-west-2.compute.amazonaws.com
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR:
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: POST
HTTP_REFERER: http://piotrkrzyzek.com/
REQUEST_URI: /wp-load.php?mwprid=<randIDnumberhere>
QUERY_STRING:
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36
REQUEST BODY: {"params":{"site_url":"http:\/\/piotrkrzyzek.com\/","public_key":"==","notifications":{"plugins":0,"themes":0,"wp":0,"backups":0,"url":null,"notification_key":null},"brand":null,"username":"piotrkrzyzek","action":"add_site","id":"","signature":""},"settings":{"notice":null,"network_notice":null,"deactivate_text":null,"master_url":"http:\/\/managewp.dev\/","master_cron_url":"http:\/\/managewp.dev\/wp-content\/plugins\/master\/mwp-notifications-handle.php","noti_cache_life_time":"86400","noti_treshold_spam_comments":"10","noti_treshold_pending_comments":"0","noti_treshold_approved_comments":"1","noti_treshold_posts":"0","noti_treshold_drafts":"0","key_name":"managewp_d","dataown":118309},"add_site_signature":"","add_site_signature_id":"managewp_d"}

Here is what is in my .htaccess using the custom code part of BPSpro:

RewriteCond %{REMOTE_ADDR} !^(192\.155\.230\.147|174\.37\.199\.34|89\.216\.23\.220|77\.105\.2\.4[234567]|52\.24\.62\.11|52\.24\.187\.29|52\.25\.116\.116|52\.26\.122\.21|52\.27\.171\.126|52\.27\.181\.126|52\.88\.96\.110|52\.88\.119\.122|52\.88\.197\.180|52\.88\.215\.225|52\.89\.85\.107|52\.89\.94\.121|52\.89\.155\.51|54\.148\.73\.118|54\.186\.37\.105|54\.186\.128\.167|54\.186\.143\.184|54\.187\.92\.57|54\.191\.32\.65|54\.191\.40\.136|54\.191\.67\.23|54\.191\.80\.119|54\.191\.135\.209|54\.191\.136\.176|54\.191\.137\.17|54\.191\.148\.85|54\.191\.148\.225|54\.191\.149\.8|54\.191\.151\.18)$

#The following two were added as a test, but still didn't work
#RewriteCond %{REMOTE_ADDR} 54.191.32.65
#RewriteCond %{REMOTE_ADDR} 54.191.151.18

[AITpro Admin]

I see a random Amazon bot probe, but is there an actual problem occurring?  Looks like the Amazon bot tried to POST some content to your website, which seems extremely unusual.  So this could either be some kind of hacker probe pretending to be Amazon or it could be legitimate.  Is something not working correctly?  The probe looks more like a hacking attempt then something legit.

[Chykalophia]

thankfully it isn’t a hack or anything like that. It’s an actual attempt by ManageWP Orion trying to make an initial connection.

[AITpro Admin]

Ok so I tried to find out about ManageWP Orion and all I found was “sales” and “customer” oriented stuff without details about what Orion actually is.  Do you know what Orion is?  I get sense of something, but what the something is does not tell me anything.  Or in other words, I have no idea what Orion is or what it is supposed to do.  The other factor is ManageWP and Amazon are not affiliated with each other so I don’t see how the probe is relevant to ManageWP Orion since the origin probe is being done by Amazon and not ManageWP.

[AITpro Admin]

Hmm I just noticed that the POST parameters include references to ManageWP so my guess would be that maybe you would need to whitelist this file below in the Plugin Firewall Whitelist Text Area. Looks like this may be something new that ManageWP is doing since I have not seen this particular Security Log error before.  I looked again, but still could not find any information about what ManageWP Orion actually is or does.

/master/mwp-notifications-handle.php

Plugin Firewall Manual Setup Steps
1. Copy and paste plugin scripts/whitelist rules to the Plugins Script|File Whitelist Text Area.
2. Click the Save Whitelist Options button.
3. Turn AutoPilot Mode On.
4. Click the Plugin Firewall BulletProof Mode Activate button.

[Author]

Posts