Strange activity on my website… Can you explain me why?

Hi @cecofuli,

I did some digging around and found these pieces of information:

– This website is hot-linking your image: https://3dcenter.ru/forum/index.php?showtopic=104592
– The user-agent UtherVerse is that of a 3D-game, so they were probably visiting the above website through that game
– The IP address of that user 78.251.188.88, is from France

So here’s what I can advice:

1. If you want to block this traffic:

a) Go to Wordfence -> Firewall -> Blocking
b) Create a Blocking Rule -> Custom pattern
c) Put 78.251.188.88 for the IP
d) Put *Utherverse* for the Referrer
e) Click `Block Visitors Matching this pattern

You can just block the referrer without the IP address, to make sure that your website won’t be accessible through that game.

2. If you want to allow more requests per minute:

a) Go to Wordfence -> All Options -> Rate Limiting
b) Change the settings for If a human's page view exceed to a higher value
c) Change the settings for If a crawler's page view exceed to a higher value
d) Click Save Changes in the top right corner

Note: I would only recommend these changes, if users are complaining that they are getting randomly blocked from viewing pages

3. Or you can simply ignore this, Wordfence will automatically temp-ban this IP address if they are accessing the website too frequently.

Dave

Hi..

same story some minutes ago…
Look at this picture…

View post on imgur.com

Hi again!

I have something else you can try too:

1. Go to Wordfence -> All Options
2. Put /extra/43_Rope/16_Rope.jpg for Immediately block IPs that access these URLs
3. Save Changes

For example: https://i.imgur.com/7cdeDGR.png

I think that website hot-linking to your website might be the issue, but the traffic should request your website over and over.

Dave

hi wfdave,

thank you for your time

I have followed your first instructions

a) Go to Wordfence -> Firewall -> Blocking
b) Create a Blocking Rule -> Custom pattern
c) Put 78.251.188.88 for the IP
d) Put *Utherverse* for the Referrer
e) Click `Block Visitors Matching this pattern

But I had this message from Wordfence

Ranges mixing IPv4 and IPv6 addresses are not supported.

So, I wrote so, and it works. Is my procedure correct? =)

c) IP Range – 78.251.188.88-78.251.188.88

Now I want to follow your second suggestion =)

• This reply was modified 5 years, 9 months ago by cecofuli.

Ok,

done also your second suggestions. Now we will see =)

Oops! I made a mistake, you can put the block for `Put *Utherverse* for the User-agent?

You don’t need to put the IP range, just the User-agent block.

Dave

Ahh… ok, no problem Dave. thank you very much for your help =)
I will use your tips in the future I’m sure!