Unusual activity after installing Wordfence

  • Resolved Jesse23

    (@jesse23)


    3 years, 6 months ago

    Since I installed Wordfence Security plugin, I am seeing some unusual activities. My site was tried to accessed using 100’s of weird URLs. Link above has the list of some URLs used. So, is this is something normal after installing Wordfence Security plugin? Or, it’s someone doing purposely?

    Thanks,
    Jesse

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)

  • @jesse23,

    What you see in your log simply indicates that your website is being hit by China (most likely, a bot trolling for website vulnerabilities). Their IP Address is 123.58.210.165.

    According to AbuseIPDB, the above IP has been flagged as malicious. We recommend you block the IP — or better yet — the associated ASN, which is AS135377. You can obtain ASNs from this website. If you block their ASN, you won’t have to block their IP Address. We use Cloudflare for this purpose. Also, when blocking ASNs, be careful and research the company in question. You could also be blocking non-malicious IPs.

    Another option would be to block “China” (country) using Wordfence and/or Cloudflare, especially if you’re not running an ecommerce website or don’t expect to do business with them.

    Wordfence is working great for you. It’s properly identifying all of your website visitors. The log should be your guide to determine if humans or bots are potentially malicious.

    Just in case, we don’t work for Wordfence. Simply sharing our experience with Wordfence.

    Cheers!

    Plugin Support WFAdam

    (@wfadam)

    Hello @jesse23 and thanks for reaching out to us!

    @jetxpert had an excellent reply to your thread. It’s sadly almost more normal to see this sort of traffic than actual traffic on your site. Wordfence is doing its job by keeping anything malicious at bay.

    Thanks again!

    Thread Starter Jesse23

    (@jesse23)

    Hi AeroStar, thank you for your response and proper explanation. Yeah, I did block the IP and country (china), the same time I noticed the activities. I am glad that, Wordfence has this capability.

    I started this thread here, to find out more and just to make sure that, I am not blocking someone mistakenly. Once again, thanks a million for you response and explanation, it was so nice of you!

    • This reply was modified 3 years, 6 months ago by Jesse23.
Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Unusual activity after installing Wordfence’ is closed to new replies.