Bad traffic in last 20-25 days - .bc.googleusercontent.com

SpiderWeb

Active member
Trusted Uploader
Sep 23, 2020
183
166
43
Hi friends...

I have a blog and it is getting bad traffic since last 20-25 days with wordfence recognising hostname like xxx.xxx.xxx.xxx.bc.googleusercontent.com
Though i have blocked them in wordfence with advanced rules.

In last 1 month, my blog saw 189 complex attacks and 98 bruteforce attempts. Because of all checks in place at wordfence and cloudflare, all were getting failed.

But since last 20-25 days, this attack is hitting my blog again and again (though blocked at wordfence level)

Is there anyway i can block this bad traffic before reaching my website (at cloudflare firewall)...

I tried putting hostname as *.bc.googleusercontent.com (in Cloudflare Firewall rule), but this firewall rule did not work...

Any further steps will be appreciated....

Spidy
 

vigyavan

Active member
Jun 22, 2019
222
181
43
India
linktr.ee
Add all these in a page rule in cloudflare

URL: https://yourdomain.com/wp-admin

Screenshot 2021-03-26 145152.jpg

And in Firewall

1)
Screenshot 2021-03-26 145435.jpg

(http.user_agent contains "Yandex") or (http.user_agent contains "muckrack") or (http.user_agent contains "Qwantify") or (http.user_agent contains "Sogou") or (http.user_agent contains "BUbiNG") or (http.user_agent contains "knowledge") or (http.user_agent contains "CFNetwork") or (http.user_agent contains "Scrapy") or (http.user_agent contains "SemrushBot") or (http.user_agent contains "AhrefsBot") or (http.user_agent contains "Baiduspider") or (http.user_agent contains "python-requests") or (http.user_agent contains "crawl" and not cf.client.bot) or (http.user_agent contains "Crawl" and not cf.client.bot) or (http.user_agent contains "bot" and not http.user_agent contains "bingbot" and not http.user_agent contains "Google" and not http.user_agent contains "Twitter" and not cf.client.bot) or (http.user_agent contains "Bot" and not http.user_agent contains "Google" and not cf.client.bot) or (http.user_agent contains "Spider" and not cf.client.bot) or (http.user_agent contains "spider" and not cf.client.bot)

2)

Screenshot 2021-03-26 145453.jpg

(http.request.uri eq "/wp-admin")
 

sijibae

Active member
Apr 23, 2019
118
39
28
Just check your installed plugins and theme. Make sure, there are no encrypted/encoded/obfuscated code which hard to read.
 

robertrocks2342

New member
Jun 19, 2022
2
0
1
In most recent multi month, my blog saw 189 complex assaults and 98 bruteforce endeavors. On account of all actually takes a look at set up at wordfence and cloudflare, all were getting fizzled.

Be that as it may, since last 20-25 days, this assault is hitting my blog over and over (however impeded at wordfence level)

Is there at any rate I can obstruct this awful traffic prior to arriving at my site (at cloudflare firewall)...
 
Last edited:

About us

  • Our community has been around for many years and pride ourselves on offering unbiased, critical discussion among people of all different backgrounds. We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu