• Resolved magdigit

    (@magdigit)


    Dear Wordfence-authors,

    I noticed something strange happening in my Life Traffic section.
    A bot with IP 2001:1af8:4700:a034:2:: is checking my site every minute.
    Everyday I search my Life Traffic for suspect IP’s.
    But with this one IP I have to scroll endlessly down and down to cover one whole day.

    Does anybody know what that IP 2001:1af8:4700:a034:2:: stands for? How I can delete it, so I could check the Life Traffic quicker?

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support wfphil

    (@wfphil)

    Hi @magdigit

    On the Live Traffic page enable the Expand All Results switch.

    Can you send a link to an image-sharing service with a screenshot of a few of the hits from this IP address.

    Thread Starter magdigit

    (@magdigit)

    @wfphil
    Thanks for reaching out to me!
    You can find a screenshot here:

    https://booxalive.nl/wordfence-screenshot/

    Sometimes there are some 40 hits one after another, sometimes even not a minute in between.
    That is só annoying for a quick scan of the visitors.

    I do hope I can get rid of this tsunami of ‘bots’…

    Plugin Support wfphil

    (@wfphil)

    Thank you for the update.

    The IP address is only sending requests for the home page.

    The IP address belongs to a hosting provider called Leaseweb:

    https://whois.domaintools.com/2001:1af8:4700:a034:2::

    The user-agent information is missing from the hits in the feed screenshot which is strange as that could have provided some more useful information about the bot and if you can safely block it.

    If you do want to block it then you can follow the instructions below:

    https://www.wordfence.com/help/blocking/#ip-address

    Thread Starter magdigit

    (@magdigit)

    @wfphil

    Thank you for thinking with me!
    I did an experiment since I noticed that stubborn IP.
    Normally I have my admin page open and also the Wordfencepage, next to one of the category pages inside my site.
    But when I noticed that IP, I did not open my site itself anymore.
    That resulted in less visits of that IP during the day, but when my check came down to about 10 hours, the IP comes back every minute.

    So I fear it has something to do with my own IP?

    Anyway, I blocked it. And I do hope I don’t get tomorrow the same amount of hits, but now labelled ‘deblock’. :-/

    Maybe to be continued…

    Thread Starter magdigit

    (@magdigit)

    @wfphil
    Since I blocked that IP, I now get endless scrollable stream of this blocked IP!
    So far nothing changes, from about 10 hours back every minute it turns up and up.

    https://booxalive.nl/screenshot-wordfence/

    I also included there the Lookup info.
    Is there any way to get rid of this IP altogether?

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘IP bot 2001:1af8:4700:a034:2:: comes in any minute’ is closed to new replies.