Hey! I only see from Italy, France and Germany, but they were all in a week. Never had it before.
Hello,
unfortunately I often see Ukraine at the top of the list of where attackers come from on my sites. You might want to block that network temporarily using the “Advanced blocking”.
wfasa Thank you. I thought I could only block by country. I’m new to Wordfence and I was getting worried about this situation.
I’m having this problem as well from Ukraine.
@wfasa is it best to disable the entire 13,000 IP Range of this network? Also why “temporarily” block instead of permanent? Thanks.
Since past few days i am max from
us-west-2.compute.amazonaws.com
compute-1.amazonaws.com
I plan to block it completely but will have to monitor resource, as the website is normal informative company site and not much traffic too so should be ok.
Lets see shall keep posted.
If possible, country block Ukraine and China. Big reduction in bad bots and hacker probes. Sure, the motivated criminals can use methods to get around that, but they like the low hanging fruit. Keep yourself high in the tree. MTN
thezeal,
if you block lots of networks originating from Ukraine you will likely end up blocking any legit traffic you could get from Ukraine. So if you want people to be able to visit your site from Ukraine only block whole networks during attacks. The same goes for IP addresses really. IP addresses change owners so if you block one forever you could be blocking legit users in the future.
Yes Ghostrider07
Like many users,I’m also bombarded by attempts from Lviv, Ukraine (broadband.kyivstar.net) and aws-amazon US
Unfortunately for me like many other users,
the solution that wfasa referring to block using
“advanced blocking option” used to work but not any more.
Why in the world both of broadband.kyivstar.net and aws-amazon US
has yet to be blocked centrally on WF yet,remain a big mystery ?
Check out
http://www.davemroz.com/blocking-kyivstar-from-accessing-your-wordpress-site/
Regarding country blocking, if done through Wordfence you can set it up so your block message tells legit users to contact you for an individual bypass of the block. My advice is to be honest with yourself, and if you truly think you’ll get large amounts of important human traffic from Ukraine then don’t country block, otherwise give it a try.
Also, the rate based blocking rules in Wordfence can be very effective though difficult to tune.
If you do decide to block a large amount of IPs to prevent massive attacks, doing so might be better done in your .htaccess file or in your server firewall.
MTN
