Answer the question
In order to leave comments, you need to log in
Is there a centralized blacklisting system against botnet and brute as well as doss attacks?
I recently installed fail2ban on the server and was surprised that it turns out that not only Wordpress sites are brute force, but also ssh and ftp and probably something else that I don’t even know, so when I started blocking requests in Wordpress, I did it through the Wordfence plugin, I still saw that requests continue, and constantly receiving requests to open the page strains the server all the same, I started blocking ip through isp manager, well, it’s easier and more visual there) as soon as I blocked a couple, similar requests from other ips and even countries immediately rained down, there was a riot of colors and a variety of flags states, of course, I was a little surprised, like a regular site, what do they need from me? but there are still sites on the server and there are quite a few of them. eventually logged into the control panel and closed access via .htaccess by writing there
<Files wp-login.php>
order allow,deny
deny from all
</Files>
<Files xmlrpc.php>
order allow,deny
deny from all
</Files>
Answer the question
In order to leave comments, you need to log in
there is no
IP they are taken from normal cars
about sorting out the SSS - yes, it’s better to immediately block China preventively, and Indian comrades who are good at spitting in English, but not taking anything
Here, most likely, a white list of IPs should be done - the target audience is from Russia, which means we add all blocks of addresses of Russian providers to the white list. Then only Russian botnets will attack you - there are much fewer of them.
I just scored let them pick it up, for 10 years I have not been hacked into any of the thousands of servers.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question