How does Wordfence block IPs?

  • Resolved jbx

    (@jbx)


    12 years, 7 months ago

    I am looking for a simple automated solution which blocks malicious bots who try to bring the site down by requesting the same page thousands of times. Although this is a simple kind of DOS, it still brings WordPress down if the hosting provider has some limits, such as the number of Mysql queries one can do in an hour.

    How does Wordfence decide when to block an IP address?

    Is this actually added to the .htaccess file so that further requests do not get through to PHP and WordPress? (If it doesn’t how does it deny them access?)

    Does Wordfence use wp-cron to remove blocked IP addresses after some time? Or do they have to be removed manually?

    Thanks

    http://wordpress.org/plugins/wordfence/

Viewing 1 replies (of 1 total)
  • Plugin Author Mark Maunder

    (@mmaunder)

    12 years, 6 months ago

    Hi,

    Currently the blocked request does hit PHP. We’re about to fix this and add some serious love to blocking efficiency and performance, so please hang in there until the next release which will (I promise!!) really knock this out the park.

    The blocked IP’s eventually expire (they’re stored in mysql) and are periodically removed.

    Regards,

    Mark.

Viewing 1 replies (of 1 total)

The topic ‘How does Wordfence block IPs?’ is closed to new replies.