Ahrefs bot hit server every second / minute using ip range 54.36.0.0 - 54.36.255.255 and unable to be blocked with Cloudflare using any methods. Now the blocking is via cpanel ip blocker. server responded 403. But if it keeps on hitting, I will be out of bandwidth soon !!
See log :
54.36.150.83 - - [13/Jun/2019:15:44:27 +0800] “GET /product-tag/white/?filter_color=black,red,navy,magenta,white HTTP/1.1” 403 246 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
54.36.150.182 - - [13/Jun/2019:15:44:47 +0800] “GET /product-tag/maroon/?filter_color=magenta HTTP/1.1” 403 232 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
54.36.148.79 - - [13/Jun/2019:15:45:07 +0800] “GET /product-tag/yellow/?filter_color=white,magenta,purple HTTP/1.1” 403 243 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
2001:d08:df:ea3d:75b9:e7ec:7098:4dc3 - - [13/Jun/2019:15:45:23 +0800] “POST /wp-admin/admin-ajax.php HTTP/1.1” 200 67 “https://www.tshirtmy.com/wp-admin/plugins.php” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36”
54.36.149.98 - - [13/Jun/2019:15:45:39 +0800] “GET /product-tag/magenta/?filter_color=navy,magenta,sea-blue,red HTTP/1.1” 403 245 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
2001:d08:df:ea3d:75b9:e7ec:7098:4dc3 - - [13/Jun/2019:15:45:54 +0800] “GET /wp-admin/plugins.php?action=deactivate&plugin=blackhole-bad-bots%2Fblackhole.php&plugin_status=all&paged=1&s&_wpnonce=acbb2dfe2f HTTP/1.1” 302 - “https://www.tshirtmy.com/wp-admin/plugins.php” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36”
54.36.150.144 - - [13/Jun/2019:15:46:05 +0800] “GET /product-tag/pink/?filter_color=black,purple,magenta HTTP/1.1” 403 243 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
2001:d08:df:ea3d:75b9:e7ec:7098:4dc3 - - [13/Jun/2019:15:46:00 +0800] “GET /wp-admin/plugins.php?deactivate=true&plugin_status=all&paged=1&s= HTTP/1.1” 200 41076 “https://www.tshirtmy.com/wp-admin/plugins.php” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36”
2001:d08:df:ea3d:75b9:e7ec:7098:4dc3 - - [13/Jun/2019:15:46:08 +0800] “GET /wp-content/plugins/facebook-for-woocommerce/assets/js/facebook-infobanner.js?ts=1560411964&ver=4134c2e4a398b8b07e3cfd601cd4f0e6 HTTP/1.1” 200 540 “https://www.tshirtmy.com/wp-admin/plugins.php?deactivate=true&plugin_status=all&paged=1&s=” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36”
2001:d08:df:ea3d:75b9:e7ec:7098:4dc3 - - [13/Jun/2019:15:46:06 +0800] “POST /wp-admin/admin-ajax.php HTTP/1.1” 200 67 “https://www.tshirtmy.com/wp-admin/admin.php?page=WordfenceWAF&subpage=waf_options” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36”
54.36.150.101 - - [13/Jun/2019:15:46:25 +0800] “GET /product-category/uniform-shirt/t-shirts/honey-comb/?filter_color=royal-blue,white,sea-blue HTTP/1.1” 403 261 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
2001:d08:df:ea3d:75b9:e7ec:7098:4dc3 - - [13/Jun/2019:15:46:23 +0800] “POST /wp-admin/admin-ajax.php HTTP/1.1” 200 103 “https://www.tshirtmy.com/wp-admin/plugins.php?plugin_status=all&paged=1&s” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36”
54.36.149.9 - - [13/Jun/2019:15:46:46 +0800] “GET /product-tag/white/?filter_color=navy,white,sea-blue HTTP/1.1” 403 240 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
54.36.150.189 - - [13/Jun/2019:15:47:05 +0800] “GET /product-tag/magenta/?filter_color=navy,ash-grey,black HTTP/1.1” 403 244 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
2001:d08:df:ea3d:75b9:e7ec:7098:4dc3 - - [13/Jun/2019:15:47:09 +0800] “POST /wp-admin/admin-ajax.php HTTP/1.1” 200 65 “https://www.tshirtmy.com/wp-admin/admin.php?page=WordfenceWAF&subpage=waf_options” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36”
2001:d08:df:ea3d:75b9:e7ec:7098:4dc3 - - [13/Jun/2019:15:47:08 +0800] “POST /wp-admin/admin-ajax.php HTTP/1.1” 200 67 “https://www.tshirtmy.com/wp-admin/plugins.php?plugin_status=all&paged=1&s” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36”
2001:d08:df:ea3d:75b9:e7ec:7098:4dc3 - - [13/Jun/2019:15:47:42 +0800] “GET /wp-admin/admin.php?w3tc_default_config_state_note=y&key=common.show_note.plugins_updated&value=false&page=w3tc_dashboard&_wpnonce=f42b5ea891 HTTP/1.1” 302 - “https://www.tshirtmy.com/wp-admin/plugins.php?plugin_status=all&paged=1&s” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36”
2001:d08:df:ea3d:75b9:e7ec:7098:4dc3 - - [13/Jun/2019:15:47:51 +0800] “GET /wp-admin/plugins.php?plugin_status=all&paged=1&s= HTTP/1.1” 200 40645 “https://www.tshirtmy.com/wp-admin/plugins.php?plugin_status=all&paged=1&s” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36”
54.36.150.35 - - [13/Jun/2019:15:47:58 +0800] “GET /product-category/uniform-shirt/?filter_color=black,navy,sea-blue HTTP/1.1” 403 249 “-” “Mozilla/5.0 (compatible; AhrefsBot/6.1; +http://ahrefs.com/robot/)”
2001:d08:df:ea3d:75b9:e7ec:7098:4dc3 - - [13/Jun/2019:15:47:58 +0800] “GET /wp-content/plugins/facebook-for-woocommerce/assets/js/facebook-infobanner.js?ts=1560412076&ver=4134c2e4a398b8b07e3cfd601cd4f0e6 HTTP/1.1” 200 540 “https://www.tshirtmy.com/wp-admin/plugins.php?plugin_status=all&paged=1&s=” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36”
2001:d08:df:ea3d:75b9:e7ec:7098:4dc3 - - [13/Jun/2019:15:48:10 +0800] “POST /wp-admin/admin-ajax.php HTTP/1.1” 200 67 “https://www.tshirtmy.com/wp-admin/admin.php?page=WordfenceWAF&subpage=waf_options” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36”
2001:d08:df:ea3d:75b9:e7ec:7098:4dc3 - - [13/Jun/2019:15:48:59 +0800] “POST /wp-admin/admin-ajax.php HTTP/1.1” 200 67 “https://www.tshirtmy.com/wp-admin/plugins.php?plugin_status=all&paged=1&s” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36”