Quantcast
Channel: WordPress.org Forums » [Wordfence Security - Firewall, Malware Scan, and Login Security] Support
Viewing all 33155 articles
Browse latest View live
↧

User locked out from signing in

June 29, 2018, 2:58 pm
$
0
0

Replies: 0

Hi all, I keep getting the following email – should I be worried?

I use a non-conventional username and I believe my password is hard to guess.

A user with IP addr 193.201.224.28 has been locked out from signing in or using the password recovery form for the following reason: Exceeded the maximum number of login failures which is: 10. The last username they tried to sign in with was: ‘404’.
The duration of the lockout is 30 minutes.
User IP: 193.201.224.28
User hostname: 193.201.224.28
User location: Ukraine

I’ve had 2,364 blocks from Ukraine in the last 7 days, 10 from the Netherlands and 10 from Canada.

  • This topic was modified 4 minutes ago by NiallASD.
↧
Search

Wordfence could not register

June 30, 2018, 5:35 am
$
0
0

Replies: 0

Guys guys, I would love some help.
Sorry that it is Saturday…

I’m trying to install wordfence but it tells me that :
Wordfence could not register with the Wordfence scanning servers when it activated. You can try to fix this by deactivating Wordfence and then activating it again, so Wordfence will retry registering for you. If you keep seeing this error, it usually means your WordPress server can’t connect to our scanning servers, or your wfConfig database table cannot be created to save the key. You can try asking your host to allow your server to connect to noc1.wordfence.com or check the wfConfig database table and database privileges.

I tried a few times to install and I have the same issue.
So I’m trying to find a solution, and I’m wondering if the problem is not on my .htaccess file. Because this is what i got :

# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ – [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

# Wordfence WAF
<Files “.user.ini”>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order deny,allow
Deny from all
</IfModule>
</Files>

# END Wordfence WAF

Some things should be allowed and not denied, or I am wrong ?

↧
↧

Wordfence on hosted BLOG

June 30, 2018, 10:25 am
$
0
0

Replies: 0

Our website hosts WordPress and inserts a WP blog into the site. They recently upgraded their WP PHP and now our login is blocked. I was able to get around the login and see that neither WordFence nor WF assistant is available to edit. Should I have both WordFence and Assistant loaded? I would guess they will not want to edit WF in their files because it will affect all users.

↧

Database Backup Restore Issue

June 30, 2018, 5:09 pm
$
0
0

Replies: 0

I use automysqlbackup to create backups of the databases of my wordpress sites. However, if I try to restore from backups where your plugin was installed I end up with a few errors like this: Duplicate entry ‘\x0B\xEF\xBF\xBD\xEF\xBF\xBD\xEF\xBF\xBD\xEF\xBF\xBD\xEF\xBF\xBD’ for key ‘PRIMARY’. I can ignore these errors and it will restore everything except for some of your tables like wfKnownFileList and wfFileMod will be blank. Any idea how can I resolve this?

  • This topic was modified 49 minutes ago by blwdjustin.
  • This topic was modified 49 minutes ago by blwdjustin.
↧

Wordfence Alert email has strange youtube video embedded

July 1, 2018, 2:27 pm
$
0
0

Replies: 0

We are using the free version of WordFence and scanning of the website is clean.

But the alert email that wordfence sends has this video embedded at the bottom of the email

Blocked for XSS: Cross Site Scripting in POST body: comments=<a href="http://www.youtube.com/watch?v=pqOx7zWd8qE">Квартира в Красной Поляне<

Any Ideas?

Thanks

Jeremy

  • This topic was modified 1 hour, 17 minutes ago by .
↧
↧

Site won’t load with Wordfence deactivated

July 2, 2018, 8:35 am
$
0
0

Replies: 0

Hello,

I can’t figure this out. My WordPress site won’t load when Wordfence is deactivated. I get an HTTP 500 error when trying to load the page. I can still obviously get to /wp-admin, but not the main page. I cannot delete Wordfence from my plugins page either. I’ve tried multiple times… I’ve checked the option to delete the tables and data when deactivating Wordfence. It does delete the tables and data, but it still cannot be deleted from plugins. If I remove the wordfence folder from my plugins folder manually it’ll be gone, but that doesn’t resolve the issue either. I’m not really sure where to look. Any advise would be appreciated. Thanks!

↧

Can somebody help me with this?

July 2, 2018, 8:58 am
$
0
0

Replies: 0

Hi there, I have installed Wordfence, the free version, on my website. I am using the Firewall and all (free) other options. Yet, I got this message and I do not know what it means exactly. Is someone trying to upload files to my website? Is so, where is the leak? Is there a leak? Can somebody help me with this? Thanks in advance.
– – – – –
July 1, 2018
1:22pm
Blocked for Malicious File Upload (PHP)
July 1, 2018
1:22pm 1a
Blocked for Malicious File Upload (PHP)
July 1, 2018
1:22pm
Blocked for jQuery HTML5 File Upload <= 3.0 – Unauthenticated Options Update and Arbitrary File Upload
July 1, 2018
1:22pm
Blocked for a Malicious File Upload in file: upload=sfn.php
July 1, 2018
1:22pm
Blocked for a Malicious File Upload in file: upload=sfn.php
July 1, 2018
1:22pm
Blocked for Malicious File Upload (PHP)
July 1, 2018
1:22pm
Blocked for Malicious File Upload (PHP)

↧

The endlessley annoying email alerts from Wordfence

July 2, 2018, 10:02 am
$
0
0

Replies: 0

I posted before, and I took suggestions, and trimmed preferences. But I still get tons of annoying Wordfence email alerts.

what is the bare minimum, to receive? The bare bare bare critical one to check? Thanks.

↧
Search

Scan Fail

July 2, 2018, 12:17 pm
$
0
0

Replies: 1

Hi, I’m having trouble getting the wordfence scan to work. It just gives a general error: “Scan Failed

The current scan looks like it has failed. Its last status update was 1 hour 43 mins ago. You may continue to wait in case it resumes or stop and restart the scan. Some sites may need adjustments to run scans reliably. Click here for steps you can try.”

I’m on Siteground. Has anyone have problems with using Wordfence scanner on there?

I know my max execution time is 120 and I’ve set the Maximum execution time for each scan stage to 75 but it’s still not working. Any other ideas?

↧
↧

Move Login page

July 3, 2018, 4:55 am
$
0
0

Replies: 0

Hello,
sorry for my english.
I juste want to ask if wordfence will integrate à moving “login page option” for limit number of attack on the default page ? (14000 today)
It is in your futur project ?
Thank you

↧

Blocked logins from my server IP

July 3, 2018, 8:14 am
$
0
0

Replies: 0

I use free version of Wordfence, an all my sites. But I keep getting this message only for one site “A user with IP addr xx.xxx.xx.xxx(this is my server IP) has been locked out from signing in or using the password recovery form for the following reason: Exceeded the maximum number of login failures which is: 5. The last username they tried to sign in with was: ‘admin’.

I do not understand what this means exactly? Is there any leak or malicious scripts that tries to login or what?

Any help is welcome 🙂

  • This topic was modified 21 minutes ago by fileidol.
↧

Exclude Files From Scan Doesn’t Work?

July 3, 2018, 9:50 am
$
0
0

Replies: 0

I’m using WordPress 4.9.6 and Wordfence 7.1.8 on a Linux server running PHP 7.2. I’ve got a forum set up and running in a subfolder named “forum” in the root folder where WordPress is installed. In Wordfence Scan Options -> General Options, I have “Scan files outside your WordPress installation” unchecked, and in Scan Options -> Advanced Scan Options, “Exclude files from scan” I have:


forum/cache/production/*

Yet every week when I receive the email digest, I get multiple notices in the Recently Modified Files section for files modified in the forum/cache/production folder.

Does “Exclude files from scan” not work that way? According to the documentation here, it looks like I’m doing it right.

↧

Different Admin User IP sign in using same credentials

July 3, 2018, 10:21 am
$
0
0

Replies: 0

Hi,

I just wanted to know if let’s say I log into a site with wordfence installed using another IP address as say for example, I am in another country while accessing the site or I am using a VPN, in which case the IP address will be different, will wordfence block the access?

Regards

↧
↧

Scan fail

July 3, 2018, 1:56 pm
$
0
0

Replies: 0

This is the error scan. I have checked line 754, but it is empty. On line 753 there are filenames and I have tried to edit them, but it doesn’t work.
I have another site on the same domain in a subfolder, and the scan works correctly.
Here it is the log:

[Jul 03 22:48:49:1530650929.441932:1:error] <br /> <b>Warning</b>: scandir(D:\inetpub\webs\violacappellettiit/,D:\inetpub\webs\violacappellettiit/): Access is denied. (code: 5) in <b>D:\inetpub\webs\violacappellettiit\wp-content\plugins\wordfence\lib\wfScanEngine.php</b> on line <b>754</b><br /> <br /> <b>Warning</b>: scandir(D:\inetpub\webs\violacappellettiit/): failed to open dir: No such file or directory in <b>D:\inetpub\webs\violacappellettiit\wp-content\plugins\wordfence\lib\wfScanEngine.php</b> on line <b>754</b><br /> <br /> <b>Warning</b>: scandir(): (errno 2): No such file or directory in <b>D:\inetpub\webs\violacappellettiit\wp-content\plugins\wordfence\lib\wfScanEngine.php</b> on line <b>754</b><br />
[Jul 03 22:48:49:1530650929.440241:2:error] Scan terminated with error: Wordfence could not read the contents of your base WordPress directory. This usually indicates your permissions are so strict that your web server can’t read your WordPress directory.
[Jul 03 22:48:48:1530650928.664184:2:info] The disk has 232209.92 MB available
[Jul 03 22:48:48:1530650928.663438:2:info] Total disk space: 599.87 GB — Free disk space: 226.77 GB
[Jul 03 22:48:48:1530650928.634762:2:info] Scanning DNS A record for http://www.violacappelletti.it
[Jul 03 22:48:48:1530650928.632614:2:info] Starting DNS scan for http://www.violacappelletti.it
[Jul 03 22:48:41:1530650921.787592:1:info] Contacting Wordfence to initiate scan
[Jul 03 22:48:25:1530650905.488529:1:info] Scan stop request received.

↧

Weird Info in Activity Log

July 3, 2018, 2:09 pm
$
0
0

Replies: 0

Ran a scan, and this is what it states at the top: “Scan Complete. Scanned 15976 files, 42 plugins, 2 themes, 13 posts, 0 comments and 7039 URLs in 54 minutes 46 seconds.”

Okay, this is a fairly small (25 pages or so) website, where are the 7039 URLs coming from?

↧
Search

Host Firewall & Jetpack Protection?

July 4, 2018, 2:19 pm
$
0
0

Replies: 0

Hello, I was wondering about having too much protection on WordPress sites to where it may slow down performance.

My VPS hosting plan allows for each domain to have it’s own monitoring and firewall setup. Should this be completely disabled if I have WordFence installed on a domain that uses only WordPress?

Also, I use the Single Sign On feature with Jetpack and a few other options but with most of the options disabled. The have options for brute force attacks and login security, do these mix up with WordFence stuff and can I leave them disabled?

If it’s better to use the firewall via my VPS hosting provider’s panel, should I disable WordFence firewall?

Thanks.

↧

error_log array_key_exists warnings

July 4, 2018, 5:44 pm
$
0
0

Replies: 0

Hi
The error log has been constantly growing with these entries:

PHP Warning: array_key_exists() expects parameter 2 to be array, boolean given in /home/xxxxxx/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/storage/file.php on line 478

and

PHP Warning: Cannot use a scalar value as an array in /home/xxxxxx/public_html/wp-content/plugins/wordfence/vendor/wordfence/wf-waf/src/lib/storage/file.php on line 499

Current PHP version is 5.6.

Any help would be appreciated.
Thanks

↧
↧

wordfence plugin causing site errors

July 4, 2018, 10:22 pm
$
0
0

Replies: 0

Hi, I just requested help for my site which was down for no reason, with lines of warnings appearing on the page, I couldn’t access admin either.

My hosting provider advised me to disable wordfence – which I did via cpanel and that helped, I can now see the site and login to admin.

Are you aware of any issues since this morning with the wordfence plugin?

thanks
Nelly

↧

File System Credentials Required fails

July 5, 2018, 1:49 am
$
0
0

Replies: 0

I have entered the data correctly, as confirmed by the host, and this feature works for my three other sites run on the same instance, but for this one I simply get a screen “File System Credentials Required” and nothing happens.

↧

File “wafRules.rules” does not exist

July 5, 2018, 2:03 am
$
0
0

Replies: 0

HI,

I have this message: File “wafRules.rules” does not exist”.

I do not know how to fix this error !

Thanks !

↧
Viewing all 33155 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>