How to find worst offenders

  • Resolved scullydion

    (@scullydion)


    5 years, 4 months ago

    Hello!

    I run multiple website on the same server and sometimes find that the same IP addresses are trying to take down my sites. Is there a way of searching the IP address to see which addresses are the worst offenders? E.g. which IP’s come back day after day more so than other IP addresses.

    Thanks

    Clare

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author gioni

    (@gioni)

    There is no such feature, but if you have basic knowledge of SQL and access to phpMyAdmin you can run an SQL query to retrieve those IPs.

    Thread Starter scullydion

    (@scullydion)

    I’ll read up on how to do that – thanks for your help.

    Plugin Author gioni

    (@gioni)

    Here is an example. Run this query in your database to get the TOP 50 IP addresses blocked by Cerber.

    SELECT IP, COUNT(IP) ip_count FROM cerber_log WHERE activity IN (10,11) GROUP BY IP ORDER BY ip_count DESC LIMIT 50

    Thread Starter scullydion

    (@scullydion)

    Thank you so much for taking the extra time to show me this! Bad IP addresses beware – I’ll get you now! ??

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘How to find worst offenders’ is closed to new replies.