Top 10 IP’s, countries blocked and blocked attacks

  • Resolved eheijns

    (@eheijns)


    1 year, 2 months ago

    Hi,

    I’m not sure what to make of this. I received an alert from Wordfence giving me Top 10 IPs Blocked and Top 10 Countries Blocked and also Recently Blocked Attacks (see below). What kind of attack are these and how to resolve this?

    August 7, 2023
    3:30pm

2a04:3543:1000:2310:9cc8:ddff:fe03:215c (Singapore) Blocked for Known malicious User-Agents August 7, 2023
    3:30pm

2a04:3543:1000:2310:9cc8:ddff:fe03:215c (Singapore) Blocked for Known malicious User-Agents August 7, 2023
    2:50pm

163.44.198.41 (Thailand) Blocked for Known malicious User-Agents August 7, 2023
    2:50pm

163.44.198.41 (Thailand) Blocked for Known malicious User-Agents August 7, 2023
    2:34pm

2406:da1a:8f3:100:1c04:ef7:a7d8:8d26 (India) Blocked for Known malicious User-Agents August 7, 2023
    2:34pm

2406:da1a:8f3:100:1c04:ef7:a7d8:8d26 (India) Blocked for Known malicious User-Agents August 7, 2023
    1:39pm

147.182.139.152 (United States) Blocked for Known malicious User-Agents August 7, 2023
    1:04pm

217.160.54.97 (Germany) Blocked for Known malicious User-Agents August 7, 2023
    1:04pm

217.160.54.97 (Germany) Blocked for Known malicious User-Agents August 7, 2023
    12:42pm

2a02:cec0:10:58::1 (Netherlands) Blocked for Known malicious User-Agents

    Is my website under attack from all these coountries. It doesn’t seem plausible to me.

    Best regards,
    Evert

    • This topic was modified 1 year, 2 months ago by eheijns.
    • This topic was modified 1 year, 2 months ago by eheijns.

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Thread Starter eheijns

    (@eheijns)

    Should I block the suspect IP’s under Wordfence > Tools > Live traffic?

    Plugin Support wfpeter

    (@wfpeter)

    Hi @eheijns, thanks for getting in touch about this.

    These are a list of blocks that the firewall has made on your behalf, so you don’t need to take any action.

    Generally, we consider a manual blocking regime unnecessary as it can be time consuming to keep up with current URLs and IP ranges etc. Wordfence should protect you from known “bad” IPs, User-Agents etc. and now considers the intent of a human/bot by the pages they’re trying to visit (and how) the most important factor when blocking.

    If your site is being hit many times from one specific IP over and over, I can see why you’d want to stem the flow yourself. You can permanently set an IP block yourself in the Wordfence > Blocking page but don’t recommend it for everything that Wordfence is catching anyway.

    Thanks,
    Peter.

    Thread Starter eheijns

    (@eheijns)

    OK. Thanks!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Top 10 IP’s, countries blocked and blocked attacks’ is closed to new replies.