High # of login attempts by Cloudflare IP

General
1

IP 172.68.132.32 has 556 times requested for wp-login.php of bobsrantsandraves.com in the last 15 minutes. A reverse lookup shows this is a Cloudflare IP.

My website is hosted on Cloudways (DO). MySQL was shutdown - possibly due to excessive login attempts over-taxing the server?

If this is a legit Cloudflare IP I don’t want to blacklist it… how do I prevent this IP from flooding my site’s wp-login.php?

2

Hi @bob8 have you tried restoring visitor IP?

https://support.cloudflare.com/hc/en-us/articles/200170786-Restoring-original-visitor-IPs-Logging-visitor-IP-addresses-with-mod-cloudflare-

1 Like
3

Thanks, cloonan. I will read the instructions and try installing mod_cloudflare. Sounds exactly what I need. I also need to setup rate limiting on Cloudflare to protect login abuse.

Thanks for your help!
Bob

1 Like
4

Try mod_remoteip instead, mod_cloudflare is no longer supported.

2 Likes
5

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.