- green: OK, no downtime
- s11: OK, no downtime
Bots hammer every website with WordPress login and system addresses, even sites that don't use WordPress. Most of our clients run Joomla, so we built a custom server-wide rule that blocks those WordPress attack paths on every site that isn't a WordPress site. Genuine WordPress sites are on an allow-list and work as normal.