Attack to my site! Urgent!

  • Resolved thebigbang

    (@thebigbang)


    4 years, 8 months ago

    Hi,
    I’m using Wordfence (free version) and in the last weeks the plugin blocked a lot of attacks from bot (and sometime also from human).
    There is a bot that attacks my site continuously and every day, always from the same country and with the same hostname.
    I follow these path: Wordfence > Tools > Live Traffic > Run Whois > Block this network, but the attacks continue.
    Is there a way to definitively block this bot?
    Thanks in advance
    Best regards

    @gerroald

Viewing 6 replies - 1 through 6 (of 6 total)

  • Try to block a “region” or ISP by manually blocking an IP range (with asterisks or CIDR) within htaccess file (For apache servers). You will need FTP access for this. This is the fastest method, but have higher chance of blocking legitimate users with the same IP range

    Or

    Sign up for Cloudflare and set up your site on their DNS and it will filter trafic through their service. They have a very nice firewall system for manually blocking countries, IPs or sending a captcha challenge to every user to weed out bot attacks. Cloudflare is free, but needs up to 24 hours for setup time (For DNS changes).
    But, if the attacker already has the original IP for the website, then they can bypass Cloudflare and go directly to your website.

    I’d recommend a combination of both.
    Use the “I’m under attack on cloudflare” to serve EVERYBODY with a captcha, even legitimate users, every 5 minutes. This will stop 80% of the attacks, but shouldn’t be enabled all the time, because it will annoy normal users.
    and
    htaccess to filter what gets through Cloudflare

    • This reply was modified 4 years, 8 months ago by iraqiboy90.
    • This reply was modified 4 years, 8 months ago by iraqiboy90.
    • This reply was modified 4 years, 8 months ago by iraqiboy90.
    Thread Starter thebigbang

    (@thebigbang)

    Hi,
    thanks for the answer. I’m not an expert so it’s a little bit difficult for me to follow your advice. Could I contact you by email so I can send you some screenshot to verify if I’m doing well? In this way I think I will be able to solve my problem.
    Thanks in advance ??

    Hey @thebigbang,

    Can you please share a screenshot of the hostname? If so, I can share screenshots of how to set up the Custom Pattern rule.

    Please let me know.

    Thanks,

    Gerroald

    Thread Starter thebigbang

    (@thebigbang)

    Hi @gerroald,
    yes, I will send it to your email indicating that it refers to this ticket. You wrote me some time ago and I have it.
    Thanks in advance.
    Best regards

    Hey @thebigbang,

    I just wanted to let you know that I’ve responded to your email. Please let me know how it goes.

    Thanks,

    Gerroald

    Thread Starter thebigbang

    (@thebigbang)

    Hi,
    I saw, thanks. ??

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘Attack to my site! Urgent!’ is closed to new replies.