I got a DDoS attack in my woocommerce last weekend and i could stop it but the plugin is not detecting the attack. In 6h i got 2k orders (failed orders with Paypal).
Same issue is happening today right after i re-activated the malware plugin. So i disabled it again as it’s not stopping the the attack.
Any idea?
My plugin does not stop DDoS attacks on WooCommerce. The Brute-Force Login Protection only helps protect from attacks of this kind on your wp-login page. For WooCommerce you will likely need to formulate some kind of custom defense since your WooCommerce store will have it’s own structure and this exploit will be tailored specifically for your store.
Try to find a commonality in your access_log files that you could block with an .htaccess Rule, or else add some additional CAPTCHA to your checkout process with a CAPTCHA plugin that is designed for WooCommerce integration.