• When I’m under a particularly persistent brute force attack, I do this manually, but Troy Hunt has described how he uses Azure to automatically block bad IPs at the Cloudflare level. It would be awesome if this were an advanced option in Wordfence.

    Troy Hunt’s post on the topic is here: https://www.troyhunt.com/azure-functions-in-practice/

    • Attacker starts dictionary attack – e.g. attempts to login as ‘admin’
    • Wordfence blocks IP as normal
    • Wordfence sends API request to Cloudflare setting CAPTCHA for that IP
    • After X days, Wordfence uses API to clear CAPTCHA

    This would be hugely useful as it would better defend the origin web server from malicious traffic, benefitting performance and hosting costs for those of use on AWS or other PAYG hosting.

    Thanks in advance,

    Graham Anderson

  • The topic ‘Feature Request: option to use Clouflare API to block at network level’ is closed to new replies.