Question about Immediately block IPs that access these URLs

  • Resolved pacadmin01

    (@pacadmin01)


    5 years ago

    I have a question about how to use the “Immediately block IPs that access these URLs” feature. My website is continually being hit by cbots trying to access the following urls. (note: the ?date = portion is always different)

    https://www.MYDOMAINNAME.com/ecwd_calendar/calendar/2001/?date=2040-11-10&t=map
    https://www.MYDOMAINNAME.com/ecwd_calendar/calendar/2001/?date=2039-7-21&t=4day

    At one point I had the plugin WD Events Calendar plugin installed but uninstalled and removed it completely after it was attacked a couple of months ago. Unfortunately, there are still many bots out there trying to access this. WordFence has been blocking them but I was wondering if using the “Immediately block IPs that access these URLs” function would be helpful in blocking any new bots as soon as they try to access the /ecwd_calendar/

    If it would be helpful, what would I enter as the url? Would it be /ecwd_calendar/*

    Thanks for your help
    Kathy

Viewing 3 replies - 1 through 3 (of 3 total)
  • wfdave

    (@wfdave)

    Hi @pacadmin01,

    Indeed if you put /ecwd_calendar/* within Immediately block IPs that access these URLs this will prevent bots from accessing that page (and it will block their IP address from accessing any other part of your website).

    Note that if your website has /ecwd_calendar/ indexed, for example, such as the websites in this search:

    https://www.google.com/search?q=”%2Fecwd_calendar%2Fcalendar%2F”

    Anyone who visits your website through a link that has /ecwd_calendar/ will be instantly blocked as well.

    So I’d just make sure to check your Google Search Console, to see if it’s safe to block this URL before making the changes within Wordfence.

    Dave

    Thread Starter pacadmin01

    (@pacadmin01)

    Thanks for your help Dave. I’ve done this so hopefully it will help

    Thread Starter pacadmin01

    (@pacadmin01)

    I added /ecwd_calendar/* to the Immediately block IP’s that access these URLS option and it is the only URL that I’ve added there. However, it appears that MSN crawlers are getting blocked by this rule when trying to access other URLs. See the following example

    United States was blocked for Accessed a banned URL at https://www.MYDOMAINNAME.ca/tutorial-from-watercolours-to-pastel/
    11/26/2019 12:55:14 PM (1 hour 44 mins ago)
    IP: 207.46.13.39 Hostname: msnbot-207-46-13-39.search.msn.com
    Human/Bot: Bot
    Browser: undefined
    Mozilla/5.0 (compatible; bingbot/2.0; +https://www.bing.com/bingbot.htm)

    Do you know why this would happen?
    Kathy

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Question about Immediately block IPs that access these URLs’ is closed to new replies.