Support

I just need confirmation please ...

For the past week, my site is being constantly attacked by various Amazon Technologies across the world.

I have configured WAF to only allow access to IP's in the whitelist - and mine is the only one there.
For added security, have also added a Administrator Secret URL parameter.

So, if I am correct, I do not have to add the IP's of Amazon Technologies to my blacklist because they will not be able to access my back end because their IP's are not in my whitelist.

Can someone please confirm ? I'd rather not site and ban hundreds of IP's if I dont need to !

You are correct. They won't be able to find your back end login screen. Even if they find it, they have to guess the user ID and password. Even if they get the right password, Admin Tools will keep them out based on the IP address not in the whitelist. Actually, I don't know what order the whitelist block comes in, but you have made it very difficult for anyone to log into the back end of your site.

This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.