DDoS attack blocking
Three months ago, the site was attacked, but after connecting Cloudflare, everything became fine. Rules, WAF, etc. are enabled.
At the moment, we have been receiving an attack with small requests from many different IPs for 3 days. It looks like a layer 7 attack. We performed a JS check upon entering the site - it works, but it works for everyone (bots and clients). Accordingly, this is reflected in the orders.
We need to ensure that there is no check for regular users, while requests from bots are not processed.
The site is on WordPress.
What are the options for a solution?
I am attaching a file with requests by IP.
Applications 1
-
Good evening. I have experience in creating internet resources of various complexity, as well as solving problems, improvements, and creating websites on OpenCart, WordPress, and others.
I use PHP, Python, and other languages and technologies depending on the task.
I can provide examples of my work if needed.
Write to me, and we will discuss the details.
Similar completed project: Ремонт сайту на WP
-
It's so easy to fix everything)
Write to me, I'll do it turnkey)
Experience of over 5 years)
-
428 Hello!
I am a cybersecurity specialist, focusing on protecting web resources from DDoS and Layer 7 attacks, including on WordPress sites with Cloudflare.
The situation you described does indeed resemble an L7 flood due to distributed requests. JS checks are ineffective here, as they also execute for real users. The optimal solution would be:
- Setting up dynamic Firewall Rules / Rate Limiting / Managed Challenge in Cloudflare with segmentation by User-Agent, behavior, and IP reputation.
- Implementing server-side validation of requests (at the PHP or Nginx level) to block bots before the page loads.
- Using Cloudflare Turnstile or Invisible reCAPTCHA v3, which do not interfere with regular users.
- Additionally, I can conduct log analysis and build attack signatures for ongoing protection.
… I can take on full diagnostics, protection configuration, and optimization of Cloudflare/server without affecting site conversions.
I am ready to discuss the details and review your log file for an accurate assessment.
-
2215 36 0 Good day.
I will reconfigure. I will do it quickly and efficiently.
Feel free to contact me.
-
206 2 0 Good day. Just install the plugin for WP if the attack is specifically on WordPress. There are enough tools for limits there.
Current freelance projects in the category Javascript and Typescript
Support and development of the cleaning company's website
20 USD
I'm looking for a web developer/webmaster for long-term support and development of a cleaning company's website. Website: https://donely.ca About the project DoneLy Home Services is a cleaning service company in Canada that is actively growing and expanding its geographical… Javascript and Typescript, Web Programming ∙ 1 day 4 hours back ∙ 59 proposals |
Development of a website according to the specifications on FramerYou need to create a website based on the parameters in the technical specification. https://docs.google.com/document/d/1ODO2C9Krb4AaMiJz9wfbNzWlAyA2FwCCHL8r0biajUY/edit?usp=sharing Please provide your actual rate based on this design. HTML & CSS, Javascript and Typescript ∙ 2 days 5 hours back ∙ 26 proposals |
Development of an interactive Palworld map for the websiteWe need to develop an interactive map for Palworld based on the example: https://palworld.gg/map We need not just a static image, but a full-fledged interactive map where users can view locations, toggle object categories on/off, search for specific points, and interact with… HTML & CSS, Javascript and Typescript ∙ 3 days 20 hours back ∙ 32 proposals |
Development of the AM Mobility platform (car service, parking, insurance, car rental)
5731 USD
We are looking for a team or an experienced Full Stack developer to create the MVP of the AM Mobility platform. AM Mobility is a unified digital ecosystem for motorists, combining in one application and web platform: parking; car service; tire fitting; car wash; car rental;… Javascript and Typescript, Web Programming ∙ 9 days 2 hours back ∙ 119 proposals |
Gsap animations
22 USD
Good day. Corrections need to be made in the current project. A specialist is needed who works well with gsap/lenis. Animation of cards needs to be done. Detailed specifications here:… Javascript and Typescript, Web Programming ∙ 9 days 8 hours back ∙ 21 proposals |