Want to know a simple way to stop your website from being hit by thousands of automated attacks every week? A FREE way.
Ban traffic from China, Hong Kong (aka China) and Russia (mostly China though.)
Some software allows this, some WordPress plugins do, but CloudFlare is my favourite here.
Sometimess you want their traffic, or you need to route internet traffic through their servers, as is the nature of the internet sometimes. So, you don’t block them outright – you instruct CloudFlare to issue them with a challenge (a captcha of varying difficulty.) You then set your server to ban an IP address after a large amount of 404 errors (file not found) in a short space of time.
Here’s a VERY small sample of what I recently had:
How I fixed it? Screenshot follows…