• what is the duration of ip block that is blocked from these settings https://prnt.sc/vws0ei

    also why is there no option to block ip that are trying to login with specific usernames or specific url or xml-rpc

    I think you should have a custom setting where the user can set the block duration for any set rules

    like I would like to set block ip trying to login with admin username = permanent block

    block ip trying to login with non existent username = 1 week block

Viewing 4 replies - 1 through 4 (of 4 total)
  • I fully agree that “behavior rules” would be a great addition to this plugin. Once someone tries xmlrpc or an attempt to log into admin, for example, they should be permanently blocked. We know that their behavior is suspect. I also think that since you have the ability to resolve an IP Address to the URL and Domain, a list of blocked domains would be another great feature. For example, I have noticed that in the sites I support, amazonaws.com is not a trustworthy source. There are others. I would love to block all traffic from a specific domain.

    Thread Starter wordpresserror

    (@wordpresserror)

    you mean the host name right?

    Yes, for example, I have a lot of hostile traffic from amazonaws.com and would love to just stop all traffic. Amazon is providing cover for bad actors. They do no good on my sites and are quite aggressive in attempts to log in or reach admin areas. I looked at trying to load the entire IP range for Amazon AWS but it is too large and complex. When people hide behind private networks, generally they are up to no good, especially when they try to enter a back door area of a site.

    Thread Starter wordpresserror

    (@wordpresserror)

    yeah the plugin must have that option to block the host too but i dont think blocking amazonaws is a good idea as many other good website crawling services also use amazonaws

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘duration of ip block’ is closed to new replies.