Multi attack Attempts from the same IP

  • Resolved Ibry

    (@toibry)


    4 years, 3 months ago

    Hi,

    How come in the report shows multi attack attempts from the same IP using directory travel and within a short time?

    Even though they’re all blocked, but shouldn’t Wordfence blocks in IP from the first attempts and keep him blocked for like at least 24 hours or so?

    Regrads

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfphil

    (@wfphil)

    Hi @toibry

    Any requests that match the firewall rules in the Rules subsection of the Advanced Firewall Options section are immediately blocked and do not have a block time set.

    Thread Starter Ibry

    (@toibry)

    Thanks found it, it’s how long nd IP should be blocked if rules is breaked, I set that to 1 month ??

    Plugin Support wfphil

    (@wfphil)

    Hi @toibry

    Thank you for the update.

    Any requests that match the firewall rules in the Rules subsection of the Advanced Firewall Options section are immediately blocked and do not have a block time set.

    So if an IP address is blocked by the Directory Traversal firewall rule then that IP address is not blocked for any length of time.

    The option How long is an IP address blocked when it breaks a rule does not apply to the firewall rules in the Rules subsection of the Advanced Firewall Options section.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Multi attack Attempts from the same IP’ is closed to new replies.

Tags