Block not working?

  • Resolved Vince992001

    (@vince992001)


    4 years, 9 months ago

    The log shows several hundred entries from the same IP in a 30 second period that all say “Exceeded the maximum number of page not found errors per minute for human”.
    I have this set to block the IP when it exceeds a rate of 60 per minute.

    After it blocked the first one, I would have expected the IP to be blocked for 30 minutes. Why are more still coming?

    Thanks

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Support wfpeter

    (@wfpeter)

    4 years, 9 months ago

    Hi @vince992001, thanks for getting in touch.

    I think the best way to check this would be if you used a service like Snipboard to show your Rate Limiting settings as they currently are.

    On Live Traffic, you could also use an advanced filter by IP to establish the first and last hit (easier without expanded results selected) within the specific date range to show that these limits were exceeded. It would be helpful to see anything you can provide here, but I appreciate if there are hundreds of lines it might be easier to grab the first and last just so I can see the details about the nature of the traffic.

    Let me know if you have any issues.

    Thanks,

    Peter.

    Thread Starter Vince992001

    (@vince992001)

    4 years, 9 months ago

    Thanks for the reply.
    Sorry for the delay getting back to you. I was not emailed that there was a reply.

    Here are the first and last hit:

    https://snipboard.io/M9mFh6.jpg

    Here are my rate limiting settings:
    https://snipboard.io/TuKrkM.jpg

    Thanks for the help

    Plugin Support wfpeter

    (@wfpeter)

    4 years, 9 months ago

    Hi @vince992001, thanks for providing those.

    I have seen a number of login attempts affected by this issue in the past because of a plugin conflict, but not the same with 404s. However, I’d like to rule out this possibility by seeing a copy of your site diagnostics that would include your installed plugins list.

    Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    Thanks again,

    Peter.

    Thread Starter Vince992001

    (@vince992001)

    4 years, 9 months ago

    I have send the report.

    Thanks

    Thread Starter Vince992001

    (@vince992001)

    4 years, 9 months ago

    I see that today, Sept 13, the same thing happened again. Hong Kong IP was blocked for exceeding the number of page not found errors……………several hundred times in a one minute period.

    Plugin Support wfpeter

    (@wfpeter)

    4 years, 8 months ago

    Hi @vince992001,

    My apologies, but we don’t appear to have received the site diagnostic, unless you sent it with a different username specified in the subject to “vince992001”. Please let me know if I should be looking for a different username – or please try sending another over. You can send one manually to the same email address I specified by downloading the diagnostic report as a txt file first and attaching it.

    I will continue to look into this given your most recent record of this reoccurring.

    Thanks,

    Peter.

    Thread Starter Vince992001

    (@vince992001)

    4 years, 7 months ago

    I’ve sent it again, with the username. I don’t see any recent re occurrals, can you refer back to the ones I noted above?
    Thanks

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Block not working?’ is closed to new replies.