- Messages
- 3,534
- Reaction score
- 196
- Points
- 63
My issue is: how do I stop the bad guys from getting in to my WordPress ALL THE TIME AND NOT JUST SOME OF THE TIME ?
.htaccess WAS blocking hits from IPs that are in a "deny from" line ALL the time
it has stopped doing that and now lets anyone in for hours at a time
As a test - I made the frist and last line of 'deny from's - in the root .htaccess file
"deny from (my IP)"
it did not block me for about 3 hours - and less than a hour after that it no longer blocks me
Why do I care ?
here is a span of a few hours of hits from bad guys (I have a lot more hits)
###
I have --> deny from ...199.21.96.0/22...
that is net range of 199.21.96.0 - 199.21.99.255
received these 4 hits
#1> root at server 11/19/2013 22:28:41
#2> root at server 11/19/2013 22:28:41
#3> root at server 11/19/2013 22:28:45
#4> root at server 11/19/2013 22:28:46
'REMOTE_ADDR' => '199.21.99.110'
which is...
IP Location: Russian Federation Russian Federation Moscow Yandex Inc
ASN: Russian Federation AS13238 YANDEX Yandex LLC (registered May 12, 2000)
Resolve Host: spider-199-21-99-110.yandex.com
###
I have --> deny from ...5.0.0.0/8...
that is net range of 5.0.0.0 - 5.255.255.255
received this hit
root at server 11/20/2013 02:12:16
'REMOTE_ADDR' => '5.9.112.180'
which is...
IP Location: Germany Germany Nuremberg Hetzner Online Ag
ASN: Germany AS24940 HETZNER-AS Hetzner Online AG (registered Jun 03, 2002)
Resolve Host: 5-9-112-180.crawler.sistrix.net
###
I have --> deny from ...218.0.0.0/8...
that is net range of 218.0.0.0 - 218.255.255.255
received this hit
at server 11/20/2013 02:34:05
'REMOTE_ADDR' => '218.86.51.42'
which is...
IP Location: China China Fuzhou Chinanet Fujian Province Network
ASN: China AS4134 CHINANET-BACKBONE No.31,Jin-rong Street (registered Aug 01, 2002)
###
I have --> deny from ...194.0.0.0/8...
that is net range of 194.0.0.0 - 194.255.255.255
received these 2 hits
#1> at server 11/20/2013 09:15:50
#2> at server 11/20/2013 09:15:51
REMOTE_ADDR' => '194.12.74.214'
which is...
IP Location: Ukraine Ukraine Mega-inet Ltd
ASN: Ukraine AS47283 ZEUS-UA-AS FOP Koval Dmitro Orestovich (registered May 28, 2008)
Resolve Host: 214-74-12-194.zeus.poltava.ua
###
and the list goes on...
.htaccess WAS blocking hits from IPs that are in a "deny from" line ALL the time
it has stopped doing that and now lets anyone in for hours at a time
As a test - I made the frist and last line of 'deny from's - in the root .htaccess file
"deny from (my IP)"
it did not block me for about 3 hours - and less than a hour after that it no longer blocks me
Why do I care ?
here is a span of a few hours of hits from bad guys (I have a lot more hits)
###
I have --> deny from ...199.21.96.0/22...
that is net range of 199.21.96.0 - 199.21.99.255
received these 4 hits
#1> root at server 11/19/2013 22:28:41
#2> root at server 11/19/2013 22:28:41
#3> root at server 11/19/2013 22:28:45
#4> root at server 11/19/2013 22:28:46
'REMOTE_ADDR' => '199.21.99.110'
which is...
IP Location: Russian Federation Russian Federation Moscow Yandex Inc
ASN: Russian Federation AS13238 YANDEX Yandex LLC (registered May 12, 2000)
Resolve Host: spider-199-21-99-110.yandex.com
###
I have --> deny from ...5.0.0.0/8...
that is net range of 5.0.0.0 - 5.255.255.255
received this hit
root at server 11/20/2013 02:12:16
'REMOTE_ADDR' => '5.9.112.180'
which is...
IP Location: Germany Germany Nuremberg Hetzner Online Ag
ASN: Germany AS24940 HETZNER-AS Hetzner Online AG (registered Jun 03, 2002)
Resolve Host: 5-9-112-180.crawler.sistrix.net
###
I have --> deny from ...218.0.0.0/8...
that is net range of 218.0.0.0 - 218.255.255.255
received this hit
at server 11/20/2013 02:34:05
'REMOTE_ADDR' => '218.86.51.42'
which is...
IP Location: China China Fuzhou Chinanet Fujian Province Network
ASN: China AS4134 CHINANET-BACKBONE No.31,Jin-rong Street (registered Aug 01, 2002)
###
I have --> deny from ...194.0.0.0/8...
that is net range of 194.0.0.0 - 194.255.255.255
received these 2 hits
#1> at server 11/20/2013 09:15:50
#2> at server 11/20/2013 09:15:51
REMOTE_ADDR' => '194.12.74.214'
which is...
IP Location: Ukraine Ukraine Mega-inet Ltd
ASN: Ukraine AS47283 ZEUS-UA-AS FOP Koval Dmitro Orestovich (registered May 28, 2008)
Resolve Host: 214-74-12-194.zeus.poltava.ua
###
and the list goes on...