If you have recived an error message indicating *TCP_OUT Blocked*, then your website is attempting to make outbound connections, which we allow, but monitor closely to avoid abuse.
The error code is accompanied by a server IP and a DST (destination) IP. The DST is the URL your website is trying to contact. If you have a web script that has been compromised, it could be trying to send information anywhere. Tracing the DST IP is the best start to finding out what is going on.
Occasionally we have tried to help our VPS and Dedicated server customers track down this issue, and the DST is almost always one of the IPs listed below, all of which belong to Wordfence Security. This happens when the server's firewall blocks Wordfence because a DDOS or Brute force attack can cause the server firewall to react to all the port traffic. If this is the case, the pattern usually plays out like this. Some user or BOT somewhere in the world is attempting to access your Wordpress website either to gain access or to generate enough activity to cause a weak DDOS. Your Wordfence security plugin is reporting the repeated attempts to Wordfence itself, which will add the offending IP to the Wordfence database and then distribute it in the next rules package update. If this is the case, don't worry about the DST messages being sent, those are mundane. You can, and probably should, whitelist the Wordfence IP later. First, you need to stop the offending party that is causing the trouble. In this case, you are using Wordfence, and we suggest the following action. Log into your WP admin area and open the Wordfence "Live Traffic" tool. From there you can almost always see the offending IP that is causing the real problem. First be sure that you block all the offenders using the tool Wordfence provides, and then block the IPs in the server firewall to null route future connections.
69.46.36.0
69.46.36.1
69.46.36.2
69.46.36.3
69.46.36.4
69.46.36.5
69.46.36.6
69.46.36.7
69.46.36.8
69.46.36.9
69.46.36.10
69.46.36.11
69.46.36.12
69.46.36.13
69.46.36.14
69.46.36.15
69.46.36.16
69.46.36.17
69.46.36.18
69.46.36.19
69.46.36.20
69.46.36.21
69.46.36.21
69.46.36.22
69.46.36.23
69.46.36.24
69.46.36.25
69.46.36.26
69.46.36.27
69.46.36.28
69.46.36.29
69.46.36.30
69.46.36.31
69.46.36.32
