Support

Hello,

On Sunday, and within 20-30 minutes, I received thousands of Security Exemption by email.
Just for one IP address (as per below). To stop the emails coming in. I had to go into the back-end to remove my emails address.

IP Address: 184.173.244.82 (IP Lookup: http://ip-lookup.net/index.php?ip=184.173.244.82)
Reason: Admin Query String

The IP address is:

OrgName: ThePlanet.com Internet Services, Inc.
OrgId: TPCM
Address: 315 Capitol
Address: Suite 205
City: Houston
StateProv: TX
PostalCode: 77002
Country: US
RegDate: 1999-08-31
Updated: 2010-10-13
Ref: http://whois.arin.net/rest/org/TPCM

Any idea why this is happening?

Thanks
Neil

It is almost certainly an automated program attacking your site. Admin Tools kept it from finding your back end login screen, so it was unsuccessful.

It would be nice if we could stop the emails after 10 or 100, but that would be an extremely slow process to check to see how many hits you have from that IP, check the threshold to see where we should stop sending notices, decide if the notice should be sent, repeat. It could be done, but it would slow down your site when it is under attack and already too busy to handle the incoming traffic. So from a practical standpoint, we can't stop the email notices.

Note that hackers don't usually use their own IP addresses, so blocking the address probably won't help much. You can turn on the auto-block and let it automatically expire after a while, but most bots are sophisticated enough to just use another IP address.

Hi Dale,

I suspected that might be the case, but was not certain. Thanks for explaining.

Neil

You are welcome!