: Setting up Google Analytics filter to exclude any spam IP which hits wp-login.php I'm launching a new website, not hosted on WordPress, but the majority of the (thin) traffic is junk like this:

@Correia994

Posted in: #Blacklist #GoogleAnalytics #Honeypots #Spam

I'm launching a new website, not hosted on WordPress, but the majority of the (thin) traffic is junk like this:

46.165.211.194 "GET /wp-login.php HTTP/1.0" 404 8012 "-" "-"
46.165.211.194 "GET /static/wp-login.php HTTP/1.0" 404 162 "-" "-"
46.165.211.194 "GET /recycle/wp-login.php HTTP/1.0" 200 29695 "-" "-"
46.165.211.194 "GET /junkmail/wp-login.php HTTP/1.0" 200 80409 "-" "-"
199.19.122.114 "GET /administrator/index.php HTTP/1.0" 404 8051 "-" "-"


I'd like to find an automatic way to exclude any IP address that has hit a honeypot (like wp-login.php) in the last week. What would a GA filter for this look like, is it possible? Is there a good tool at the Apache level for this kind of sudden death honeypot?

The spam traffic is the majority of traffic to the site, which makes log analysis a pain.

Vote Up Vote Down

Login to post a comment!