• Resolved Rich Holmes

    (@reholmes27)


    I am creating a plugin that will check if there are any new Wordfence blocked IPs ( over 10 hits ) and then send the IP to a Cloudflare IP list which is setup as a security rule on all domains in Cloudflare.

    I have it running but I’m not sure if I’m using the correct db table, there appears to be a few options and I’m not sure which is best?

    wfBlocks7 using blockedHits as the count
    wfBlockedIPLog using blockCount as the count field
    wfHits but doing a single entry as a block

    Any advice on which would work the best scheduling it to check the db every hour?

    Thanks

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support wfphil

    (@wfphil)

    Hi @reholmes27

    We recommend reading our guide on blocking IP addresses first as you may decide that its not a worthwhile endeavour after reading our research and let the plugin do all of the blocking for you automatically:

    https://www.wordfence.com/help/blocking/#ip-address

    If you wish to continue then here is a description of the database tables:

    wfBlocks7 – All types of time-based blocks visible on the Blocking tab under the Firewall page.

    wfBlockedIPLog – Counts blocks per IP, per day, and by type for the activity report email function and plugin widgets.

    wfHits – Stores all hits visible on the Live Traffic page.

    Thread Starter Rich Holmes

    (@reholmes27)

    Hi

    Thanks for the reply. I appreciate the limitations of individual IP blocking and it’s never been worthwhile on a manual basis to copy from Wordfence to Cloudflare accounts but this automated approach allows me to have lots of WordPress sites, feeding a single IP List in Cloudflare that gets used across 80+ domains. I will need to consider the hit threshold so it’s not sending every single IP but blocking before hitting the server is the main goal here.

    I think wfBlockedIPLog is the sensible approach to take here.

    Thanks

    Rich

Viewing 2 replies - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.