• Resolved mishash

    (@mishash)


    I am getting a bit fed up with 100s of Chinese and Ukrainian hackers attacking my site daily, so I started thinking about upgrading to WordFence Premium in order to do country blocking – my target visitors are only in US and Canada. The dilemma here is performance trade-off, hence my question to those who did country blocking: when you implemented country blocking how much of performance hit did you get? Is your website loading time 10% slower, 20% slower, 50% slower than before?
    I was recently reading about country blocking technique using IPSet/IPtables and people complained that they got huge performance hit when blocked China or Russia (on every HTTP request you have to check the IP address against the big list of country IP ranges). And this technique is done on Apache level, so doing these lookups in the WordPress plugin is going to result in even higher performance price… Any feedback here?

Viewing 6 replies - 16 through 21 (of 21 total)
  • Thread Starter mishash

    (@mishash)

    @aspasa and @mountainguy2
    I added log parsing cron task to my server, so here is an updated list of bots that have been active in the past 2 weeks:
    MJ12bot BLEXBot Barkrowler DnyzBot SiteExplorer archiver coccoc ExtLinksBot HTTrack loader email python Java Ruby scalaj Go-http-client libwww-perl curl wget scan grab extract BUbiNG EveryoneSocialBot SeznamBot TweetedTimes GarlikCrawler Slackbot Yandex SocialRankIOBot FlipboardProxy TweetmemeBot LivelapBot TurnitinBot YisouSpider CCBot Sogou Crowsnest AhrefsBot Baiduspider SEOkicks Yeti Buzzbot RSSingBot Feedspotbot Veooz Fyrebot GnowitNewsbot Leikibot Mediatoolkitbot MetaURI tweetedtimes rogerbot semrush Re-Animator Mail.RU Exabot Traackr.com CCBot Ahrefs AndersPinkBot Python-urllib

    Happy blocking! 🙂

    I always get the terminology confused. Would those be called the “referrers” ? Thanks, MTN

    Thread Starter mishash

    (@mishash)

    They are referrers in a sense, but these bots and crawlers are the “referrers” that waste your site’s bandwidth, steal your content, and damage your SEO.

    Thread Starter mishash

    (@mishash)

    Webmasters only want human visitors and search engine bots from Google, Bing, Yahoo, Apple, etc.

    Sorry, I was more wondering how one would block in Wordfence Blocking? As a Browser User Agent, or Referrer?

    On another subject, I find it odd that Wordfence doesn’t do more with blocking these sorts of things, perhaps by providing a checklist.

    MTN

    By the way, my solution with China and Ukraine is I country block both of them. 99999.999 of traffic I get from those IPs is either criminal or useless. My country block message asks real humans to contact us through Facebook for back door access. I get a few such request a week on a fairly high traffic website. Only problem is the blocks fill up my Wordfence Live Traffic and since the Live Traffic filter-sort options provided by Wordfence are on the bad side of meager, I’m going to another country block plugin mainly to get those listings out of my Live Traffic (and save money by using free Wordfence). MTN

Viewing 6 replies - 16 through 21 (of 21 total)
  • The topic ‘Country blocking – to update to premium or not?’ is closed to new replies.