wtreyes
Forum Replies Created
-
I was using the Pie Register plugin and activated the reCAPTCHA that comes with it then this error appears. Anyway, I already removed the plugin from my site because I don’t know how to solve it.
- This reply was modified 9 years ago by wtreyes.
Forum: Everything else WordPress
In reply to: Unusual traffic with POST statusThanks for the info @scott_g.
Here’s more info about the Pushdo virus and how you can mitigate it.
http://www.distilnetworks.com/is-pushdo-screwing-you-details-of-the-botnet/Forum: Everything else WordPress
In reply to: Unusual traffic with POST statusHi aommundsen, I’m sorry to say that we didn’t completely solve the issue. What we did was change their domain name (since their account was the one targeted) as a band-aid solution. We also suggested cloudflare.
Forum: Everything else WordPress
In reply to: Unusual traffic with POST statusI don’t know if this will do the trick
iptables -I INPUT -d my_server_ip -p tcp --dport 80 -m string --string 'POST / HTTP/1.1' --algo bm -j DROPBut I’m also afraid that it will block all post traffic to my other sites.
Forum: Everything else WordPress
In reply to: Unusual traffic with POST statusHi C4ta, actually I do have root access to the server. I also tried the iptable you posted here but it blocked access to all sites that are hosted under the same server. So I removed it.
Here’s what I did
iptables -I INPUT 1 -p tcp --dport 80 -m string --string "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)" --algo bm -j DROPForum: Everything else WordPress
In reply to: Unusual traffic with POST statusThanks cata for the suggestion. I think you’re right, the only way to stop these traffic is through a separate hardware firewall. A software based firewall which I installed didn’t help actually. What it does was just slow the whole server. Anyway thanks once again.
Forum: Everything else WordPress
In reply to: Unusual traffic with POST statusYeah. I think I did everything I could. Captcha, Honeypot, Antimalware, Antivirus, etc. But nothing seems to stop it. Traffic is still coming in.