for the last couple of days I am having issues with Quic.Cloud. From Friday to be precise.
I've contacted their support and they are saying everything is fine on their end. They even accessed my server and disabled some rules in ConfigServer ModSec Control (33303, 77316861, 77350256). This is the response I got from them "I want to clarify that the issue is not from our end, it is the firewall (imunify and ModSec) and they are blocking our connection. Please temporarily disable and check if the issue is resolved or not, and then reach out to your hosting provider and they will be able to help you out further."
I went back and forth with them trying to resolve this but no luck there.
The issue is happening when somebody tries to access domain.com/wp-admin or wp-login. Not always, but sometimes it does. Then I have to refresh page two or three times, and it loads it normally. I have 120 websites on server, and customers are now starting to complain. When I do Bypass CDN in Quic.Cloud panel it loads web sites just normally.
Server has Immunify360 with just it's own rules enabled in ModSecurity™ Vendors.
Does anybody have some idea what could I do in order to resolve this issue?
Litespeed Cache plugin installed versions are between 126.96.36.199 and 188.8.131.52.
I do not want to go back to Cloudflare, since I bought LiteSpeed Web Server, and all websites are running Litespeed caching plugin. I am using Cloudlare as DNS manger and CNAME to Quic.Cloud. I've disabled Bot fight mode in all Cloudflare websites.
I've added IP 184.108.40.206 from Quic.Cloud to Cloudflare allow WAF list.
I've created whitelist.txt in /etc/imunify360/whitelist/ and added all Quic Cloud IP addressees but same thing happens.
My server: OS AlmaLinux v8.9.0 STANDARD standard, cPanel Version 116.0.9. 256GB RAM, 40 CPU, SSD drives in hardware RAID 1.
Please sign in to leave a comment.