• Resolved rifatspir

    (@rifatspir)


    I would like to try wordfence rate limiting, my question is does wordfence send alert when any bot or human get throttle by rate limiting?

    if not, is there any way to enable it?

Viewing 3 replies - 1 through 3 (of 3 total)
  • We don’t send an alert for that specifically. The alerts we do send can be found on the Wordfence Dashboard > General Options section where it says “Email Alert Preferences”.

    Just a FYI, throttling is generally a better option than blocking because any good search engine understands what happened if it is mistakenly blocked and your site isn’t penalized because of it. Make sure and set your Rate Limiting Rules realistically and set the value for how long an IP is blocked to 30 minutes or so.

    I generally set my Rate Limiting Rules to these values to start with:
    If anyone’s requests exceed 240 per minute
    If a crawler’s page views exceed 120 per minute
    If a crawler’s pages not found (404s) exceed 60 per minute
    If a human’s page views exceed 120 per minute
    If a human’s pages not found (404s) exceed 60 per minute
    How long is an IP address blocked when it breaks a rule 30 minutes

    Remember there is no hard and fast, one size fits all set of rules for every site. These are just a good place to start. During an attack you may want to make those rules stricter. If you see visitors, like search engine crawlers getting blocked too often, you might want to loosen them up a little.

    I hope this helps.

    Tim

    Thread Starter rifatspir

    (@rifatspir)

    @wfsupport These settings will be perfect for medium base WooCommerce store? Get daily 5k to 10k visits daily?

    I am getting lots of hits by bots and human who’s continuously stealing my products details and images.

    They should work fine. As I said, you might consider tightening them up a little if you see bots getting through, or blocking the IPs for longer periods of time. The trick is to start loose and tighten from there. You don’t want to block legitimate visitors to the site.

    Tim

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Rate limiting alerts’ is closed to new replies.