Are your site been attack by bot?

[Devilfish1688]

recently my site attack by bots....i also don't know why ...

I also not expert on this , speak to my host provider they just show me some informations , datas but I not technically expert on database etc...as they told me find deveopler for help but they also provide some helps for me self figure out.

how you all prevent bots from attack your site?

I read up , in fact is " dangerous to remove all bots " as one bot is google which index your site. hmmm...

 

[roadhamster]

Do you have access to your logfiles? I guess so, so filter out the unwanted bots by IP or useragents. You can create a .htacces file or write a php script which will block these bots from accessing your site. Google it, all the info is already there. http://lmgtfy.com/?q=block+bots+with+htaccess

 

[bigbrothers]

If the attack is coming from the same IP number each time (or a small set of IP numbers) you should block that IP number in your firewall.

Aside from the IP blocking, I would scrutinize the files that are being requested. It's a fairly common thing for open-source systems such as WordPress and Joomla to be exploited, which is one reason why they're frequently updated. If you've neglected a few updates, it's possible that someone has penetrated your site.

Try keep updating the required things to prevent from bot. - BB

 

[Devilfish1688]

well my site so far never get hack...
next I always update my WP and plugins inside.
hmm ..

 

[collegeguys4]

if you have commandline access you can use iptables to filter ip addresses. I also have a setup that auto blocks bot ip addresses based on their access activity. this system is a Perl based system

 

[MuayThai]

...

how you all prevent bots from attack your site?

I read up , in fact is " dangerous to remove all bots " as one bot is google which index your site. hmmm...

Prevent your site from hacking, not from bots visits.

 

[clevelandslim]

May be the attack is coming from same ip

 

[S2Term]

Hey OP. The same thing was happening to me. I did some changes to my .htaccess file and the attacks seemed to have dropped off.

The code is a post I made: http://www.blackhatworld.com/blackh...ode-restrict-hackers-your-wordpress-side.html

 

[Zwielicht]

What kind of bots are they?

Some bots, such as Google web bots, are ones you want to allow as you've already figured out.

On the other hand, some referrer spam (not the ghost variant) and other malicious bots that hit your website are ones you clearly want to block.

You can try creating a whitelisting certain IP addresses, blacklisting others, or use S2Term's suggestion above.

 

[onlineonly]

On some of my sites ive blocked whole countries, like Ukraine where lot of spam/hack come from.

 

[blackice6666]

It depends on what type of attack it is, if you are talking about brutefoce try to use wordfence. If you are having a HTTP DDoS attack try to sign up for the free CloudFlare. If you are having a ssh brute force or a mysql bruteforce try to allow only your IP on your firewall.

Just give us a little bit more information on what type of attack it is.

 

[umerjutt00]

Add another layer of protection for the wp login page. I have added an authentication form which requires a user/pass before accessig the wp-login.php page.

Here you go: http://support.hostgator.com/articl.../wordpress/wordpress-login-brute-force-attack

 

[CeaseFireBlack]

On some of my sites ive blocked whole countries, like Ukraine where lot of spam/hack come from.

what a coincidence, i had many bots trying to login to my site from ukraine, but then i have changed my login url, i guess you using wordfence premium to block those countries ? i think about getting it too.