So Many Attacks Shows in Analytics – Fake or Bot Traffic

  • Resolved mt22

    (@mt22)


    5 years, 4 months ago

    Hello, i have installed wordfence and no doubt its a great plugin. My site was getting down from last one month especially when i start working on wo-admin and creating any post. It shows on the top Connection lost….. I upgraded my site to a dedicated server but couldn’t fix it. When i enable Under Attack mode in cloudflare the site become little bit stable. So i installed wordfence and I have done all the setting to prevent my site but still i can see alot of bot traffic coming to my website in Analytics. can you please help me to stop this. What is the best setting to prevent myself from such traffic.Also i saw so many people trying to log in with the user admin where i don’t have a user admin how can i block them. and i saw those all are targetting /xmlrpc.php not /wp-login or wp-admin page.. I also need your help to prevent this.

    Many Thanks in advance.

    Attached is the screenshot of some.

    /?__cf_chl_jschl_tk__=48d…ma1VRsfOBrCRuotcfxQqsUdMo
    /?__cf_chl_jschl_tk__=79a…TLIq2LPpYm8KGZEC_84f_sFLU
    /?__cf_chl_jschl_tk__=c5a…m6VvD-defN9F4HbYU8SQXnxHE

Viewing 1 replies (of 1 total)
  • Plugin Support wfphil

    (@wfphil)

    Hi @mt22

    You can prevent brute force login attacks with the following recommended settings:

    https://www.wordfence.com/help/firewall/brute-force/

    The options are in the Brute Force Protection section on the All Options page.

    You can immediately block any IP address that attempts to login with the username admin by using the option Immediately block the IP of users who try to sign in as these usernames.

    You can also block XML-RPC interface brute force login attacks with the option Disable XML-RPC authentication on the Login Security >> Settings page. Only enable this option if you don’t use the XML-RPC interface to login to your site.

    You can rate limit or block bots with the Rate Limiting rules. Instructions for this with recommended settings are below:

    https://www.wordfence.com/help/firewall/rate-limiting/

    You can also create more specific blocking rules using the Custom Pattern rule options on the Firewall >> Blocking page.

    I recommend that you ask your hosting provider for assistance in resolving any issues with your site going down as it may not be related to a large volume of traffic.

Viewing 1 replies (of 1 total)
  • The topic ‘So Many Attacks Shows in Analytics – Fake or Bot Traffic’ is closed to new replies.