Increased Attack Rate

  • Resolved rajantpws2019

    (@rajantpws2019)


    5 years, 8 months ago

    hi
    we have received mails from wordfence, below is the content of the mail
    The Wordfence Web Application Firewall has blocked 100 attacks over the last 10 minutes. Below is a sample of these recent attacks:

    July 9, 2019 2:25am 159.203.86.82 (United States) Blocked for Yellow Pencil Visual Theme Customizer <= 7.1.9 Arbitrary Options Update in query string: yp_remote_get=3
    July 9, 2019 2:25am 159.203.86.82 (United States) Blocked for Yellow Pencil Visual Theme Customizer <= 7.1.9 Arbitrary Options Update in query string: yp_remote_get=2
    July 9, 2019 2:25am 159.203.86.82 (United States) Blocked for Yellow Pencil Visual Theme Customizer <= 7.1.9 Arbitrary Options Update in query string: yp_remote_get=1
    July 9, 2019 2:25am 198.27.69.176 (Canada) Blocked for Yellow Pencil Visual Theme Customizer <= 7.1.9 Arbitrary Options Update in query string: yp_remote_get=3
    July 9, 2019 2:25am 159.203.86.82 (United States) Blocked for Yellow Pencil Visual Theme Customizer <= 7.1.9 Arbitrary Options Update in query string: yp_remote_get=test
    July 9, 2019 2:25am 198.27.69.176 (Canada) Blocked for Yellow Pencil Visual Theme Customizer <= 7.1.9 Arbitrary Options Update in query string: yp_remote_get=2
    July 9, 2019 2:25am 159.203.86.82 (United States) Blocked for Yellow Pencil Visual Theme Customizer <= 7.1.9 Arbitrary Options Update in query string: yp_remote_get=3
    July 9, 2019 2:25am 198.27.69.176 (Canada) Blocked for Yellow Pencil Visual Theme Customizer <= 7.1.9 Arbitrary Options Update in query string: yp_remote_get=1
    July 9, 2019 2:25am 159.203.86.82 (United States) Blocked for Yellow Pencil Visual Theme Customizer <= 7.1.9 Arbitrary Options Update in query string: yp_remote_get=2
    July 9, 2019 2:25am 198.27.69.176 (Canada) Blocked for Yellow Pencil Visual Theme Customizer <= 7.1.9 Arbitrary Options Update in query string: yp_remote_get=test

    kindly help as we suspect some bot attack or hack on our website, pls advice

    Thanks & Regards

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)

  • Hi @rajantpws2019,

    It looks like Wordfence has reported to you that it has blocked a series of attacks from the IP address 159.203.86.82.

    In this situation, because Wordfence has automatically blocked the attacks, you do not need to do anything else. You can decide to permanently block that IP address by going into Wordfence -> Firewall -> Blocking -> Add Pattern.

    Also, if you are using Yellow Pencil (the plugin), you should make sure that it is up-to-date.

    Dave

    Thread Starter rajantpws2019

    (@rajantpws2019)

    thanks a lot, will do.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Increased Attack Rate’ is closed to new replies.