I just got some weird traffic on my website…

  • Resolved jayrally

    (@jayrally)


    4 years, 9 months ago

    Hello,

    I just checked my live traffic from wordfence, as i recently have been subject of some login attemps, the classic “admin” “administrator” attempt etc, so i’m monitoring closely and every day wordfence blocks some high response (above 300), but today something weird happened, i got A LOT of traffic from this IP:

    5.196.100.175

    to the wp-admin/admin-ajax.php, wp-admin/admin-post.php, wp-admin/admin-post.php?action=save&updated=true, wp-admin/admin-post.php?page=yuzo-related-post, wp-admin/admin-post.php?Action=EWD_UFAQ_UpdateOptions, admin-ajax.php?action=update_zb_fbc_code, admin-ajax.php?action=wcp_change_post_width

    Host name:

    server.hematech.com.mx

    I’m kinda confused and worried here, what should i do? the traffic has been allowed from wordfence and has not been blocked.

Viewing 4 replies - 1 through 4 (of 4 total)
  • WFGerroald

    (@wfgerald)

    4 years, 9 months ago

    Hey @jayrally,

    This IP has been added to several blacklists for abuse. I’d immediately permanently block it.

    On the Live Traffic page can you please share some screenshots of this IP’s interaction with the site? Please expand the details so we can get a full overview of what’s happening.

    Thanks,

    Gerroald

    Thread Starter jayrally

    (@jayrally)

    4 years, 9 months ago

    Here are some screenshots,

    https://ibb.co/hYFnv7Q
    https://ibb.co/K0qkQDK
    https://ibb.co/qpLnp7N
    https://ibb.co/M1N19Q3

    I’m sure i had blocked the ip yesterday, weirdly enough i had to block it again today, if tomorrow is unblocked again i will let you know…

    Thread Starter jayrally

    (@jayrally)

    4 years, 9 months ago

    Ok i just realized the Ip was unblocked because of wordfence, i have now permanently blocked it but i’m still very worried, by the way thanks for the support, waiting for your reply…

    WFGerroald

    (@wfgerald)

    4 years, 9 months ago

    Hey @jayrally,

    From the Live Traffic screenshot, it does look like the IP is blocked. But we can’t stop them from trying. There’s only so much we can do to prevent an attack, it’s more about making sure they aren’t successful. Please let me know how the permanent block goes.

    Thanks,

    Gerroald

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘I just got some weird traffic on my website…’ is closed to new replies.