I had an intensified attack on my website.
My site was being accessed with Suspicious Core Parameters every 3 seconds between attacks. Although Admin Tools logged all of these 1,000 or so visits, the IP address from which these visits came was not automatically blocked. Why?
My auto-ban settings are:
- Block IP after this many blocked requests: 5
- Time period: 1
- Unit of time measurement: Minutes
- Block duration: 30
- Unit of time measurement for block duration: Days
- Add persistent offenders to the IP Disallow List: Yes
- Permanently disallow IP after this many automatic blocks: 5
Â
What settings would I need to change so that the IP address is blocked in time in the event of a similar attack?
